Commercial Product Assurance (CPA) provides assurance of security products developed by commercial companies. The products are assessed against the ‘Security Characteristics’ (SCs) for the product type, which includes:
- Web application firewalls
- Encryption
- Smart Meters
- Tokens and Readers (currently in draft)