Skip to content
Preflight Audit

Preflight Audit Laboratories

Normas y programas de validación

Separamos la capacidad comercial, la preparación para validación, la acreditación de laboratorio, el reconocimiento del programa y la validación del producto. No son afirmaciones intercambiables.

Programa

ISO/IEC 17025

Autoridad

Accreditation body

Accreditation target

Method-specific laboratory competence and QMS scope; never treated as a blanket cybersecurity certification.

Programa

NIST PQC baseline — FIPS 203 / 204 / 205

Autoridad

NIST

Validation readiness

Preflight tracks finalized ML-KEM, ML-DSA and SLH-DSA standards for interoperability, migration and implementation-readiness work. This does not imply CAVP/CMVP/NVLAP validation.

Programa

NVLAP CST 17ACVT / CAVP / ACVTS

Autoridad

NIST / NVLAP

Programme-gated

ACVTS Demo proficiency is developed now; production validation requires the applicable accreditation and access.

Programa

NVLAP CST 17CM / FIPS 140-3 / CMVP

Autoridad

NIST / NVLAP

Programme-gated

Cryptographic-module testing readiness is developed now; official testing depends on the applicable laboratory accreditation.

Programa

NVLAP CST 17CM-NI

Autoridad

NIST / NVLAP

Programme-gated

Non-invasive/side-channel testing requires programme-specific competence and scope.

Programa

NVLAP CST 17ESV / ESVTS

Autoridad

NIST / NVLAP

Programme-gated

Entropy-source validation eligibility and third-party restrictions are evaluated per current programme rules.

Programa

NVLAP CST 17PIV / NPIVP

Autoridad

NIST / NVLAP

Programme-gated

PIV validation readiness follows current FIPS 201/SP 800-73 programme requirements.

Programa

Common Criteria Testing Laboratory

Autoridad

NVLAP / NIAP or applicable scheme

Accreditation target

A separate programme/business line from CST accreditation.

Programa

FIDO Security / Biometric / Document Authentication

Autoridad

FIDO Alliance

Accreditation target

Scheme recognition is pursued only under current FIDO laboratory requirements.

Programa

PCI Recognized Laboratory pathways

Autoridad

PCI Security Standards Council

Accreditation target

Targets are selected from current active payment-device/software programmes.

Programa

EMVCo Security Evaluation pathways

Autoridad

EMVCo

Accreditation target

Laboratory recognition and product categories are scheme-specific.

Programa

Cyber Resilience Test Facility pathway

Autoridad

UK NCSC / UKAS

Accreditation target

UK pathway evaluated independently of the NVLAP CST application pause.

Programa

U.S. Cyber Trust Mark CyberLAB

Autoridad

U.S. FCC

Accreditation target

Consumer-IoT CyberLAB recognition requires ISO/IEC 17025 accreditation covering the FCC programme scope plus programme recognition.

Programa

NFC Forum Authorized Test Laboratory

Autoridad

NFC Forum

Accreditation target

Official NFC certification test results require an authorized lab, approved test tools and current certification-release controls.

Programa

Bluetooth Qualification Test Facility

Autoridad

Bluetooth SIG

Accreditation target

BQTF recognition is facility and test-scope specific and must be renewed under current Bluetooth SIG rules.

Programa

Matter / Zigbee / Product Security Authorized Testing

Autoridad

Connectivity Standards Alliance

Accreditation target

Official certification testing uses authorized test houses; target scope is selected from current Alliance programmes.

Programa

SESIP Evaluation Laboratory

Autoridad

GlobalPlatform / approved scheme

Accreditation target

SESIP governance defines evaluation-laboratory competence and accreditation requirements for IoT platform security evaluation.

Programa

PSA Certified Evaluation Laboratory

Autoridad

PSA Certified

Accreditation target

Platform/Root-of-Trust evaluation is pursued only under the current approved-laboratory scheme requirements.

Programa

ISA/IEC 62443 / ISASecure laboratory pathway

Autoridad

ISASecure / accreditation bodies

Accreditation target

Industrial product/security testing and certification use scheme-specific ISO/IEC 17025 and ISO/IEC 17065 structures.

La terminología importa.

Una auditoría comercial de Preflight o una evaluación de preparación no es una validación externa gubernamental o sectorial. Un resultado de laboratorio acreditado solo se describirá como tal después de que la entidad jurídica, la ubicación del laboratorio, el método y el alcance del programa hayan sido aprobados formalmente.