CC Regulations

Overview of Common Criteria

Common Criteria (CC) regulations, or certifications, are international standards that require software and technology products to conform to certain security levels. This level of expectation allows healthcare, finance, government, education, and other vertical markets to set a level of performance requirements in the manner in which IT products are created and the manner in which they perform. This enables the developers and producers of IT products to meet certain security levels and also allows the users of these products to gain a level of confidence in their need to create compliant systems within the workplace.

The sequence of becoming CC certified is relatively onerous and there are still relatively few products that have met the standards. Developers of software or manufacturers of hardware have differing levels of security standards to produce to and then have third-party evaluations conducted to certify the end product. The certification can take many years and significant financial investment to complete.

PolicyTech supports the vision of CC regulations

The Policy and Procedure Manager is not CC compliant nor are there any plans to meet the criteria as a software product. However, Policy Tech believes the Policy and Procedure Manager is able to meet the compliance needs of our customers through the intelligent facilitation of policies and procedures, which usually do not contain any client information, security levels of internal documentation, or private content that requires a level of CC regulations. The value of the Policy and Procedure Manager is to reduce the labor cost and increase the accuracy of managing policies within organizations of all sizes.