ZTE obtains CC EAL3+ certificate for its OTN products
ZTE Corporation, a provider of information and communication technology solutions, announced that it has recently obtained the CC (Common Criteria for Information Technology Security Evaluation) EAL3+ certificate for its OTN (optical transport network) products including ZXONE 9700 series, ZXMP M721 series, and ZXONE 7000 series. As a result, ZTE has emerged as the OTN supplier in the industry to achieve Common Criteria Version 3.1 R5 compliance by the entire protection solution, creating a security boundary for users.
The CC certification for ZTE OTN Solution has been approved by the Netherlands National Communications Security Agency (NSICB), with the certificate authorised by TüV Rheinland Nederland. The evaluation was conducted by SGS Brightsight, a security assessment laboratory based in the Netherlands.
Common Criteria plays a crucial role as a judgment basis for mainstream operators in the industry due to its professionalism and influence in security evaluation. Common Criteria’s EAL3 (Evaluation Assurance Level 3) for system testing and checks represents a high certification level for system equipment among current communication products. The EAL3+ (ALC_FLR.2 Enhanced) certification indicates that ZTE’s software and hardware meet the requirements of the EAL3 and provide lifecycle security assurance for security flaw remediation.
The international mutual recognition system CCRA (Common Criteria Recognition Arrangement) comprises 31 member countries, with 17 certificate-issuing countries and 14 certificate-consuming countries. Additionally, SOGIS serves as a CC mutual recognition organisation for European Union or EFTA (European Free Trade Association) countries, focusing on specific technology areas.
The EAL3+ certification meets the evaluation and recognition requirements of the CCRA and SOGIS. Its evaluation covers design and development, process management, information security, personnel security, physical security, asset security, IT security, supply chain security, and penetration testing. This certification demonstrates that ZTE OTN products possess complete security capabilities throughout their full lifecycle, ranging from design and development to testing, production and delivery.
Cybersecurity and data protection are global issues. ZTE has always been committed to increasing the security level of its products. Cybersecurity is incorporated into all phases of planning, design, development, production, delivery and maintenance. ZTE strictly implements data protection compliance management. Looking ahead, ZTE will continue to enhance and guarantee product security quality, offering secure and trustworthy products and services to global operators.
Comment on this article below or via Twitter @IoTGN