A Security Enforcing Product (SEP) is a hardware or software component which, when deployed in an on-premises environment, provides one or more security functionalities to fulfil the intended security objectives. Amongst SEPs, there are four categories (Operating System, Boundary Protection, TEMPEST, and Cryptographic Equipment) that require a specific evaluation and approval by the National CIS Security Authority (NCSA) of a NATO Nation Submissions of Security Enforcing Products to the NIAPC are required to have supporting assurance information from a NATO-Nation National Authority.
The term ‘product’ is used here in its widest sense since security enforcing functionality may be part of a service (e.g. a cloud service) or a combination of hardware/ software products and an associated service (e.g. product updates). The key requirement for inclusion in the catalogue are that the product provides security enforcement functions that meet and/or are compatible with relevant NATO policies.