Preflight Audit Laboratories
Normes et programmes de validation
Nous distinguons la capacité commerciale, la préparation à la validation, l’accréditation du laboratoire, la reconnaissance du programme et la validation du produit. Ces affirmations ne sont pas interchangeables.
Programme
ISO/IEC 17025
Autorité
Accreditation body
Method-specific laboratory competence and QMS scope; never treated as a blanket cybersecurity certification.
Programme
NIST PQC baseline — FIPS 203 / 204 / 205
Autorité
NIST
Preflight tracks finalized ML-KEM, ML-DSA and SLH-DSA standards for interoperability, migration and implementation-readiness work. This does not imply CAVP/CMVP/NVLAP validation.
Programme
NVLAP CST 17ACVT / CAVP / ACVTS
Autorité
NIST / NVLAP
ACVTS Demo proficiency is developed now; production validation requires the applicable accreditation and access.
Programme
NVLAP CST 17CM / FIPS 140-3 / CMVP
Autorité
NIST / NVLAP
Cryptographic-module testing readiness is developed now; official testing depends on the applicable laboratory accreditation.
Programme
NVLAP CST 17CM-NI
Autorité
NIST / NVLAP
Non-invasive/side-channel testing requires programme-specific competence and scope.
Programme
NVLAP CST 17ESV / ESVTS
Autorité
NIST / NVLAP
Entropy-source validation eligibility and third-party restrictions are evaluated per current programme rules.
Programme
NVLAP CST 17PIV / NPIVP
Autorité
NIST / NVLAP
PIV validation readiness follows current FIPS 201/SP 800-73 programme requirements.
Programme
Common Criteria Testing Laboratory
Autorité
NVLAP / NIAP or applicable scheme
A separate programme/business line from CST accreditation.
Programme
FIDO Security / Biometric / Document Authentication
Autorité
FIDO Alliance
Scheme recognition is pursued only under current FIDO laboratory requirements.
Programme
PCI Recognized Laboratory pathways
Autorité
PCI Security Standards Council
Targets are selected from current active payment-device/software programmes.
Programme
EMVCo Security Evaluation pathways
Autorité
EMVCo
Laboratory recognition and product categories are scheme-specific.
Programme
Cyber Resilience Test Facility pathway
Autorité
UK NCSC / UKAS
UK pathway evaluated independently of the NVLAP CST application pause.
Programme
U.S. Cyber Trust Mark CyberLAB
Autorité
U.S. FCC
Consumer-IoT CyberLAB recognition requires ISO/IEC 17025 accreditation covering the FCC programme scope plus programme recognition.
Programme
NFC Forum Authorized Test Laboratory
Autorité
NFC Forum
Official NFC certification test results require an authorized lab, approved test tools and current certification-release controls.
Programme
Bluetooth Qualification Test Facility
Autorité
Bluetooth SIG
BQTF recognition is facility and test-scope specific and must be renewed under current Bluetooth SIG rules.
Programme
Matter / Zigbee / Product Security Authorized Testing
Autorité
Connectivity Standards Alliance
Official certification testing uses authorized test houses; target scope is selected from current Alliance programmes.
Programme
SESIP Evaluation Laboratory
Autorité
GlobalPlatform / approved scheme
SESIP governance defines evaluation-laboratory competence and accreditation requirements for IoT platform security evaluation.
Programme
PSA Certified Evaluation Laboratory
Autorité
PSA Certified
Platform/Root-of-Trust evaluation is pursued only under the current approved-laboratory scheme requirements.
Programme
ISA/IEC 62443 / ISASecure laboratory pathway
Autorité
ISASecure / accreditation bodies
Industrial product/security testing and certification use scheme-specific ISO/IEC 17025 and ISO/IEC 17065 structures.
La terminologie compte.
Un audit commercial Preflight ou une évaluation de préparation n’est pas une validation externe gouvernementale ou sectorielle. Un résultat de laboratoire accrédité ne sera décrit comme tel qu’après approbation formelle de l’entité juridique, du site du laboratoire, de la méthode et du périmètre du programme.