CSPN

The First Level Security Certification (CSPNCertification de Sécurité de Premier Niveau. The First Level Security Certification (CSPN), awarded by the ANSSI (French National Agency for the Security of Information Systems) aims to certify the robustness of a technological product, based on a conformity analysis and intrusion tests carried out by a CESTI (Centre d’Evaluation de Sécurité des Technologies de l’Information), itself approved by the ANSSI. This certification is delivered for a specific product version. All subsequent versions of the product must therefore be re-certified. CSPN certification applies to several types of cybersecurity products such as “secure storage”, “identification, authentication and access control”, or “secure communication”. To see the complete list, click here. Each year, ANSSI publishes an updated catalogue of certified products….), awarded by the ANSSIAgence Nationale de la Sécurité des Systèmes d’Information. The National Cybersecurity Agency of France (ANSSI) is a French government organisation reporting to the Secretary General for Defence and National Security (SGDSN), who is responsible for advising the Prime Minister in the exercise of his functions in the field of defence and national security. ANSSI is responsible for cybersecurity issues in France. The ANSSI provides its expertise and technical skills to organisations (administrations or companies) with a reinforced mission to the operators of vital importance (OIV), operating in areas of activity that are sensitive for the very integrity of the country and the population (health, regal, economic and technological fields). The scope of the Agency’s action concerns the computer population as a whole. In particular, it intervenes in the following areas – monitoring and reacting to any incident relating to cybersecurity, – in the development of products for civil society, – as an information and advisory body, – as a training organisation, – as a reference organisation for the labelling of trusted products and service providers… (French National Agency for the Security of Information Systems) aims to certify the robustness of a technological product, based on a conformity analysis and intrusion tests carried out by a CESTI (Centre d’Evaluation de Sécurité des Technologies de l’Information), itself approved by the ANSSI.

This certification is delivered for a specific product version. All subsequent versions of the product must therefore be re-certified.

CSPN certification applies to several types of cybersecurity products such as “secure storage”, “identification, authentication and access control”, or “secure communication”. To see the complete list, click here.

Each year, ANSSI publishes an updated catalogue of certified products.