NSCIB

Update: as of February 27th, 2025, as required by SOG-IS Policy on Article 49 and Regulation (EU) 2024/482 (article 49), the NSCIB scheme no longer accepts applications for new certifications or re-certifications.

Applicatons for CC (re)certifications should use the EUCC scheme

Applications for NSCIB certification maintenance are permitted as they do not result in a new certificate and they do not extend the period of validity of the previously issued certificate.

Maintenance on NSCIB certificates can only be requested, and must be completed, within two years of the certification date.

The Netherlands scheme for Certification in the Area of IT Security (NSCIB) was set up to enable the evaluation and certification of information technology (IT) product security aspects. The objective of the Scheme: to enable IT products and systems to be evaluated and certified in the Netherlands in a way that conforms to the so called ‘Common Criteria’ methodology (ISO-standard 15408) for Evaluation and Certification.

The NSCIB scheme is now closed (maintenance only). Holders of active NSCIB certifications continue in their responsibility to inform the scheme (ITSEF and Certification Body) as soon as possible of any known vulnerabilities in their certified TOE (including the underlying platform in the case of a composed TOE), together with information of how the issue is addressed (e.g. product update or platform surveillance report, maintenance addendum or recertification results).

TrustCB B.V. publishes all certificates issued under the Netherlands scheme, in accordance with the conditions of the CCRA and SOG-IS MRA for international recognition.

All evaluation work for the NSCIB scheme has been performed by ISO17025 accredited evaluation facilities that have been licesned by TrustCB for Common Criteria evalautions, in accordance with the NSCIB scheme requirements. See the labs page for labs that have been licensed for this scheme.

The marks that are presented on a certified product are used to inform the user that a product or system has been evaluated in accordance with the Common Criteria and the terms of the Common Criteria Recognition Arrangement (CCRA) and the SOG-IS Mutual Recognition Agreement (SOG-IS MRA).