Thursday, September 12, 2013

India obtains the Authorizing Nation Status for IT product Testing

NASSCOM and DSCI congratulate STQC (Standardization Testing and Quality Certification) and the Ministry of Communications and Information Technology (MCIT), India for being recognized as authorizing nation under the “Common Criteria - Recognition Arrangement" (CC-RA) scheme for IT products Testing. Indian now becomes the 17th Country to get the authorization among the 26 nations which agree to this participation. The announcement was made during the International Common Criteria Conference 2013 in Orlando, Florida.

The move from a participating nation to an authorizing nation will strengthen the position of India in the global assurance regime. This will help in two ways: Firstly, the labs in India will get the global recognition and the products tested in the labs will be accepted by the countries that are part of CCRA arrangement. Secondly, the investment and efforts for product testing certification by global product companies who would like to avail benefit of the arrangement in India will automatically be recognized by the other countries. Authorizing nation status will remove the bottleneck which, as of now, prevents submitting of products for testing in India.

Further, the recognition of India as an authorizing nation will allow India to create a national certification scheme as recommended under the Joint Working Group (JWG) of NSA. The  JWG report on ‘Engagement with Private Sector on Cyber Security’ recommends establishment of private owned testing labs, and also highlights the need for providing incentives to the private sector for opening test labs. Important step in this direction is to have a certification body, which can accredit the testing labs.

With STQC under the CCRA scheme having achieved this status, it can now look forward to taking up the role of a certification body; allowing private testing labs to work under the certification scheme of STQC for ICT products. STQC, with experience in spearheading standardization, testing and certification initiatives in the country, is better placed to assume the role of certification body.  STQC not only possess desired infrastructure, recognized and accredited by reputed accreditation bodies, it also has deployed skills for evaluating the product and gained critical experience in testing and certification of products. Leveraging the infrastructure, skills and experience of STQC will help India achieve the goals of the National Testing and Certification in a short span of the time.

While the Government will retain control over certification, it would accredit the private owned labs. These labs will, therefore, become an integral and important component of ecosystem for National Testing and Certification Scheme. With India’s reputation of providing cost-effective and quality services to the globe, this is likely to make it a hub for testing and certification for the global requirements.

NASSCOM and DSCI, which are members of the JWG and have led the establishment of public-private-partnership to strengthen cyber security in the country,  hope that the private sector will respond to this opportunity by setting up testing labs that can work in conjunction with government controlled certification body. The skills and expertise developed in setting up the labs and in offering services around it will also help the sector to expand its services to the global market.  This will also serve another objective of providing an option of cost-effective product testing and certification to the technology companies all over the world.