To ensure data privacy and comply with regulations, data must be erased from devices at the end of their useful lives, particularly if they have fulfilled their intended function. But not every data-wiping software is dependable and trustworthy. Worldwide certifications, such as Common Criteria, thoroughly examine data protection systems for security, attack possibilities, and design flaws before awarding certification. BitRaser has earned an EAL 2 compliance Common Criteria Certification.
It’s important to take into account not only certifications when choosing data wiping software, especially for sensitive data, but also the vendor’s reputation, the features offered, and the particular requirements of your organization’s data security rules.
Organisations choose to utilise a rigorously tested, certified data erasing tool in the age of fast expanding data protection legislation. IT Asset Managers (ITAMs), Information Systems Security Managers (ISSM), and similar professionals bear the responsibility of selecting a solution that ensures 100% erasure beyond the reach of recovery. It is imperative for organisations to select software that has undergone testing and certification by a globally recognised organisation for both security features and data-wiping capabilities.
One such internationally renowned organisation for assessing and endorsing the reliability of security measures in IT systems and products is Common Criteria (CC) Certification. Common Criteria Certification is preferred by many businesses worldwide, particularly in vital fields like finance, health, and defence.
Despite the fact that there are several data-wiping Software on the market, only a small number of them have earned the prestigious CC Certification due to the testing requirements and associated costs. BitRaser Drive Eraser is a data erasing Software that has been assessed and approved for Evaluation Assurance Level (EAL) 2 according to Common Criteria Certification.
Let’s talk more about this accreditation and the process that was employed to test the Software.
What is Certified Software for Common Criteria?
An international standard called Common Criteria is used to assess and certify the security features and functionalities of IT devices. It is crucial to verify the most recent certifications and product versions if you are searching for Common Criteria approved data wiping software, as some certifications may only apply to certain software versions.
BitRaser is one of the Common Criteria Certified Software that is tested and verified by an experienced Common Criteria Test Laboratory (CCTL). The test facilities are dispersed throughout the Certificate Authorising Member nations that make up the CCRA.
The Indian CC Certification Scheme (IC3S) is in charge of issuing CC Certificates in India. It functions under the auspices of the Standardisation Testing and Quality Certification Directorate (STQC), a division of the Indian government’s Ministry of Electronics and Information Technology.
The Common Criteria member portal has a list of all CCRA bodies as well as contact information.
The BitRaser Drive Eraser is tested using common criteria.
For the CC Certificate, BitRaser Drive Eraser v3.0.0.6 was put through a rigorous testing process.
- IC3S assessed the data-wiping effectiveness of the software using the Common Criteria Standard Version 3.1 Revision 5.
- The Common Criteria Test Laboratory (CCTL), ERTL (East) India, was the site of the testing.
- Involved EAL2 compliance testing:
- Developer testing
- Evaluation Team’s Independent Testing
- Testing for Penetration
The following methodology was used to conduct the testing:
Product Testing by Developer: After reviewing the developer’s test coverage, the assessors determined that it was satisfactory and comprehensive. The functional specification, BitRaser design, and the tests found in the developer’s test documentation all lined up perfectly.
Evaluation Team’s Product Independent Testing: The evaluators replicated the developer’s tests at CCTL by simulating them. According to the preparatory guide document, they discovered that the product was configurable. To determine if erasure algorithms were implemented in accordance with standards requirements, they examined snapshots of code snippets. After testing the BitRaser Drive Eraser executable, the CC assessors concluded that it complies with the Security Target overall.
Vulnerability Analysis and Penetration Testing: Since the application does not have any external interfaces with IP addresses or network-level access, no vulnerabilities have ever been disclosed and no vulnerabilities were discovered in the public domain.
Assessment Findings for BitRaser Drive Eraser:
The assessment of its testing, documentation, and vulnerability assessment served as the foundation for the evaluation’s findings.
Documentation Evaluation Results: The documents meet the EAL standards for CC version 3.1 Revision 5. 2.
Testing: BitRaser Drive Eraser v3.0.0.6 functions as described in the ST, functional specification, and software design because both the developer’s and independent testers’ results were in line with expectations.
Vulnerability Assessment and Penetration Testing: According to the testing, there are no exploitable vulnerabilities for “Basic Attack Potential” in the product.
Acknowledgeable, BitRaser Drive Eraser v3.0.0.6 was certified as Common Criteria EAL2. Thus, BitRaser Drive Eraser – Trusted, Tested & Certified is the only certified drive-wiping software you need whether you’re an Enterprise or Service provider offering Erasure as a Service (EAAS).
