Preflight Audit Laboratories
Standards & Validierungsprogramme
Wir trennen kommerzielle Fähigkeit, Validierungsbereitschaft, Laborakkreditierung, Programmanerkennung und Produktvalidierung. Diese Aussagen sind nicht austauschbar.
Programm
ISO/IEC 17025
Stelle
Accreditation body
Method-specific laboratory competence and QMS scope; never treated as a blanket cybersecurity certification.
Programm
NIST PQC baseline — FIPS 203 / 204 / 205
Stelle
NIST
Preflight tracks finalized ML-KEM, ML-DSA and SLH-DSA standards for interoperability, migration and implementation-readiness work. This does not imply CAVP/CMVP/NVLAP validation.
Programm
NVLAP CST 17ACVT / CAVP / ACVTS
Stelle
NIST / NVLAP
ACVTS Demo proficiency is developed now; production validation requires the applicable accreditation and access.
Programm
NVLAP CST 17CM / FIPS 140-3 / CMVP
Stelle
NIST / NVLAP
Cryptographic-module testing readiness is developed now; official testing depends on the applicable laboratory accreditation.
Programm
NVLAP CST 17CM-NI
Stelle
NIST / NVLAP
Non-invasive/side-channel testing requires programme-specific competence and scope.
Programm
NVLAP CST 17ESV / ESVTS
Stelle
NIST / NVLAP
Entropy-source validation eligibility and third-party restrictions are evaluated per current programme rules.
Programm
NVLAP CST 17PIV / NPIVP
Stelle
NIST / NVLAP
PIV validation readiness follows current FIPS 201/SP 800-73 programme requirements.
Programm
Common Criteria Testing Laboratory
Stelle
NVLAP / NIAP or applicable scheme
A separate programme/business line from CST accreditation.
Programm
FIDO Security / Biometric / Document Authentication
Stelle
FIDO Alliance
Scheme recognition is pursued only under current FIDO laboratory requirements.
Programm
PCI Recognized Laboratory pathways
Stelle
PCI Security Standards Council
Targets are selected from current active payment-device/software programmes.
Programm
EMVCo Security Evaluation pathways
Stelle
EMVCo
Laboratory recognition and product categories are scheme-specific.
Programm
Cyber Resilience Test Facility pathway
Stelle
UK NCSC / UKAS
UK pathway evaluated independently of the NVLAP CST application pause.
Programm
U.S. Cyber Trust Mark CyberLAB
Stelle
U.S. FCC
Consumer-IoT CyberLAB recognition requires ISO/IEC 17025 accreditation covering the FCC programme scope plus programme recognition.
Programm
NFC Forum Authorized Test Laboratory
Stelle
NFC Forum
Official NFC certification test results require an authorized lab, approved test tools and current certification-release controls.
Programm
Bluetooth Qualification Test Facility
Stelle
Bluetooth SIG
BQTF recognition is facility and test-scope specific and must be renewed under current Bluetooth SIG rules.
Programm
Matter / Zigbee / Product Security Authorized Testing
Stelle
Connectivity Standards Alliance
Official certification testing uses authorized test houses; target scope is selected from current Alliance programmes.
Programm
SESIP Evaluation Laboratory
Stelle
GlobalPlatform / approved scheme
SESIP governance defines evaluation-laboratory competence and accreditation requirements for IoT platform security evaluation.
Programm
PSA Certified Evaluation Laboratory
Stelle
PSA Certified
Platform/Root-of-Trust evaluation is pursued only under the current approved-laboratory scheme requirements.
Programm
ISA/IEC 62443 / ISASecure laboratory pathway
Stelle
ISASecure / accreditation bodies
Industrial product/security testing and certification use scheme-specific ISO/IEC 17025 and ISO/IEC 17065 structures.
Terminologie ist entscheidend.
Ein kommerzielles Preflight-Audit oder eine Readiness-Bewertung ist keine externe staatliche oder branchenspezifische Validierung. Ein akkreditiertes Laborergebnis wird erst dann als solches bezeichnet, wenn Rechtsträger, Laborstandort, Methode und Programmumfang formal genehmigt wurden.