Re: Common Criteria Certification



To double-check my own understanding, I verified with the program manager responsible for our participation in certification programs. Common Criteria evaluation will begin soon.

And speaking of stymied, I'm at a loss to make the link between my knowing your email and the spouse of an MSRC employee! Just so that everyone here knows: you are all welcome to email me privately. If I have to forward your mail to someone else to get an answer, I cut out all identifying information first. Only I will know your email/phone/blood type/credit history/temperature of your ass in your chair. :)

Steve Riley
steve.riley@xxxxxxxxxxxxx
http://blogs.technet.com/steriley


"Kim_Jong" <KimJong@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:C1ED7D9F-5370-46C9-B25E-68D770698350@xxxxxxxxxxxxxxxx
Steve, this came from someone who is married to a Microsoft person in the
MSRC. (Now you understand why I prefer not to contact you privately.) We were
told that Microsoft has chosen to pursue a different certification but that
it is not the Common Criteria. We know of no other certifications, and we are
close to the NSA here. We can't seem to get any more information than that.
The account team is stymied. Thank you, we will watch for the posting on
CCEVS.
--
Kim Jong, MCSE


"Steve Riley [MSFT]" wrote:

I wanted to try to find out from you where you heard this information,
because it's wrong. We are indeed pursuing Common Criteria (ISO/IEC 15408)
certification for both Windows Vista and Windows Server 2008. In fact, we
expect both to be listed at
http://www.niap-ccevs.org/cc-scheme/in_evaluation.cfm in a few weeks.

Steve Riley
steve.riley@xxxxxxxxxxxxx
http://blogs.technet.com/steriley


"Kim_Jong" <KimJong@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A8308CF3-A2CF-4398-936E-F0AD277391B1@xxxxxxxxxxxxxxxx
> Thank you Steve, can you please post your response here? I wish to keep > my
> email address private, thank you.
> -- > Kim Jong, MCSE
>
>
> "Steve Riley [MSFT]" wrote:
>
>> Please reply to me privately. I can help you with this.
>>
>> Steve Riley
>> steve.riley@xxxxxxxxxxxxx
>> http://blogs.technet.com/steriley
>>
>>
>> "Kim_Jong" <KimJong@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:9102EE4D-ABB9-406C-B442-385EE099B3E2@xxxxxxxxxxxxxxxx
>> > We have learnt here in D.C. that Microsoft will not be attaining >> > Common
>> > Criteria certification of Vista and W2K8. This concerns us greatly, >> > as
>> > most
>> > of our clients are Federal agencies that require Common Criteria
>> > evaluation.
>> > We will not be able to deploy new OS to these agencies without this >> > CC
>> > certification. Many people will lose their jobs if government can no
>> > longer
>> > use Windows. What is Microsoft going to do about this obstacle?
>> > -- >> > Kim Jong, MCSE
>>
.



Relevant Pages

  • Re: Common Criteria Certification
    ... Microsoft is not pursuing CC certification, ... Kim Jong, MCSE ... it is not the Common Criteria. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Common Criteria Certification
    ... We are indeed pursuing Common Criteria certification for both Windows Vista and Windows Server 2008. ... > of our clients are Federal agencies that require Common Criteria ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Enterprise level firewall selection
    ... Subject: Enterprise level firewall selection ... You should take a look at Common Criteria, ... certified under The Modular Firewall Certification Criteria Version ...
    (Security-Basics)
  • Re: Windows XP and Common Criteria Certification
    ... > Has Windows XP been submitted for Common Criteria ... could you tell me what lab is doing the testing ... > and what the timetable for certification is? ... Windows 2000 recently achieved it's Common Criteria Certification. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Requesting Informational Interview
    ... Why would you want these replies private? ... On this path to schooling, I was posed with a very ... Information Assurance Certification Review ... Information Assurance Certification Review Board ...
    (Pen-Test)