NIA - NATO Information Assurance

PURPOSE

The NATO Information Assurance Product Catalogue (NIAPC) established under Directive AC/322-D(2010)0042 (22-09-2010), provides NATO nations, and NATO civil and military bodies with a catalogue of Information Assurance (IA) products, Protection Profiles and Packages that are in use or available for procurement to meet operational requirements.

This INFOSEC Technical and Implementation Directive is published by the NATOC3 Board in support of the NATO Information Management Policy (NIMP), NATO Security Policies for the protection of classified and non-classified information, and the Primary Directive on INFOSEC. It establishes the process and procedures for the establishment, update and maintenance of the NATO Information Assurance Product Catalogue (NIAPC).

SCOPE

This INFOSEC Directive is mandatory and binding upon the IA Branch of the NHQC3S, SECAN, and NATO nations submitting IA products, Protection Profiles, or Packages onto the NATO Information Assurance Product Catalogue (NIAPC). NATO nations submitting IA products, Protection Profiles or Packages on the NATO Information Assurance Product Catalogue (NIAPC) shall provide the required information on these products, Protection Profiles or Packages when requested by the IA Branch of the NHQC3S and shall update that information at regular intervals.

RESPONSIBILITIES

BACKGROUND

NATO Security Policies, supporting directives and guidance documentation call for the implementation of security measures and use of security products to protect information processed, stored or transmitted (handled) in communication, information, other electronic systems, and supporting system services and resources, against loss of confidentiality, integrity or availability.

Project staffs involved in systems/equipment planning, selection and procurement need to have access to information on the current and future availability of IA products in order to realistically define how IA aspects can be met in systems handling NATO information. Therefore, a definitive, current list of NATO IA Products, Protection Profiles and Packages shall be formulated, updated and maintained.

Introduction