Sorry, you need to enable JavaScript to visit this website.
Skip to main content


Australasian Information Security Evaluation Facility.

The Australasian Information Security Evaluation Program (AISEP) tests ICT security products for possible inclusion on the Evaluated Products List (EPL). Australian Signals Directorate’s certification office, the Australasian Certification Authority, oversees AISEP product testing by licensed commercial evaluation facilities.

Applied Intelligence

AISEP service providers: AISEFs

Apr 11, 2019 - An Australasian Information Security Evaluation Facility (AISEF) is a commercial facility we have licenced to perform Australasian Information Security Evaluation Program (AISEP) evaluations, and has been accredited by the National Association of Testing Authorities, Australia (NATA) to conduct Common Criteria (CC) evaluations. You can contact these AISEFs regarding evaluation services: . BAE Systems…
Information security evaluation

Australasian Information Security Evaluation Program (AISEP)

Jul 10, 2018 - The Australasian Information Security Evaluation Program (AISEP) evaluates and certifies ICT products for use in Australian and New Zealand government agencies to protect official information and communications systems. The results of successful evaluations are published on the Evaluated Products List (EPL) and the internationally-recognised Common Criteria (CC) Portal. . What the AISEP provides…
Frequently asked question icon

Who is the Australasian Certification Authority (ACA) and what do they do?

Jul 1, 2018 - The Australasian Certification Authority (ACA) is the certifying body in Australia and New Zealand for CC evaluations. The ACA is part of the ACSC and implements the AISEP scheme by setting the standards and monitoring the quality of evaluations conducted by the Australasian Information Security Evaluation Facilities (AISEF). .

What is the difference between an AISEP evaluation and an AISEP certification?

Jul 1, 2018 - AISEP evaluations are conducted by an AISEF. AISEP certification is performed by us. An AISEP evaluation applies the CC Evaluation Methodology (CEM) against CC assurance requirements. The evaluation aims to produce a standardised and repeatable result that facilitates mutual recognition of certifications across CCRA participating schemes. An AISEP certification represents the validation of the evaluation activities and…
Digital Evaluation

Recommendation for ACSC evaluation

Jul 1, 2018 - You can submit a letter of recommendation for evaluation up to EAL2 where there isnt yet an ACSC-approved Protection Profile for the relevant technology. Submit your evaluation request using this letter of recommendation for evaluation template. The letter of recommendation for evaluation serves three main purposes: It provides a record and helps with tracking. It helps us communicate with you during the evaluation. It…
Information security evaluation

High assurance evaluations

Jul 1, 2018 - A high assurance evaluation encompasses rigorous analysis and testing to search for any vulnerabilities in a product or system. . What our high assurance evaluations do Our high assurance evaluations determine whether a product or system is architected, implemented and manufactured in the most robust and secure fashion. We determine the method and strength of testing required for high assurance…

What is the AISEP mission statement?

Jul 1, 2018 - AISEP exists to ensure the ready availability of a list of independently- assured ICT security products that meet the needs of Australian and New Zealand government agencies in securing their official resources in accordance with the Information Security Manual (ISM). .

What is an Evaluation Assurance Level (EAL)?

Jul 1, 2018 - An Evaluation Assurance Level (EAL) is a number assigned to a Common Criteria (CC) evaluation and certificate. It is being superseded by Protection Profiles. .

What is an Australasian Information Security Evaluation Facility (AISEF)?

Jul 1, 2018 - An Australasian Information Security Evaluation Facility (AISEF) is an ACA-approved commercial facility that is licenced to perform AISEP evaluations and has been accredited by the National Association of Testing Authorities (NATA) to conduct CC evaluations. .

What is an AISEP Acceptance Package (AAP)?

Jul 1, 2018 - The AAP contains documents prepared by the developer and AISEF, containing the Security Target (ST) and Protection Profile (PP) (if relevant) and proposed timelines for evaluation. The ST is a major component of the AAP and specifies the security requirements of the Target of Evaluation (TOE) to be evaluated against the CC security and assurance requirements. A Protection Profile (PP) is an implementation-independent…