U8 · Topic
Selection & supply chain
The right device bought from the wrong channel is the wrong device. This area gives vendor-neutral selection criteria: what FIPS, Common Criteria and FIDO certifications really prove, how to verify provenance, firmware update policy, spares and secure disposal.
- Certifications
- Provenance
- Lifecycle
Guides in this topic
- Security hardware buying checklist for practitioners
A vendor-neutral method for selecting security hardware: what FIPS 140-3, Common Criteria and FIDO certifications prove, supply-chain checks on delivery, firmware policy, spares and secure disposal.