Commercial Product Assurance

Organisation

Architectural patterns

• Walled Gardens for Remote Access
• Mobile Remote End Point Devices
• Data Import between Security Domains

  Comparisons

• Unlike Common Criteria, there is no Mutual Recognition Agreement for CPA, which means that products tested in the UK will not normally be accepted in other markets
• Unlike the CCT Mark, the coverage of CPA is limited to Information Security products, and therefore excludes services. The target audience for CPA also appears to be focused on Central Government rather than including the Wider Public Sector and Critical National Infrastructure segments that were target customers for CCT Mark