{"id":5665,"date":"2024-12-01T19:04:19","date_gmt":"2024-12-01T18:04:19","guid":{"rendered":"https:\/\/src-gmbh.de\/portfolio\/loesungen\/accelerated-security-certification\/"},"modified":"2025-09-10T17:58:09","modified_gmt":"2025-09-10T15:58:09","slug":"accelerated-security-certification","status":"publish","type":"loesungen","link":"https:\/\/src-gmbh.de\/en\/portfolio\/solutions\/accelerated-security-certification\/","title":{"rendered":"Accelerated security certification (BSZ)"},"content":{"rendered":"
\n

BSZ – the faster proof<\/h2>\n<\/div>\n
\n
\n

The accelerated security certification (BSZ)<\/a> gives manufacturers a faster way to prove the security of their IT products with a BSI certificate.<\/p>\n

The freedom from vulnerabilities is a crucial factor for users to assess the trustworthiness of a product. In order to be able to prove this product property, the German Federal Office for Information Security (BSI) had previously only provided for testing and certification according to the Comon Criteria (CC). These certifications are associated with a high level of effort and are therefore only required by customers for a few, very demanding areas of application.<\/p>\n

In order to open up areas of application beyond certification according to CC, the BSI has expanded its portfolio to include accelerated security certification (BSZ). Their focus is on verifying the manufacturer’s promised safety performance. These are tested by penetration tests with a product-related, predefined scope, whereby the penetration tests follow currently known attack scenarios. Compared to certification according to CC, the BSZ offers better plannable evaluation runtimes and, from the manufacturer’s point of view, a reduced documentation effort.<\/p>\n

BSZ lets the user of the certified products benefit by providing an understandable presentation of security performance and assuring updates to the ever-changing security situation over a defined period of time.<\/p>\n

The actual certification is preceded by the evaluation of the product by a BSI-recognized testing body such as SRC. The resulting test report serves the BSI as the basis for awarding the certificate.<\/p>\n<\/div>\n<\/section>\n

\n

An evaluation by SRC typically includes the following services:<\/h2>\n<\/div>\n
\n
    \n
  • \n
    VERIFICATION OF THE PROMISED SECURITY PERFORMANCE<\/div>\n<\/li>\n
  • \n
    CHECK OF THE INSTALLATION INSTRUCTIONS<\/div>\n<\/li>\n
  • \n
    TESTING OF THE IMPLEMENTED CRYPTOGRAPHIC PROCEDURES<\/div>\n<\/li>\n
  • \n
    PENETRATION TESTS<\/div>\n<\/li>\n
  • \n
    PREPARATION OF THE AUDIT REPORT<\/div>\n
    \n