Skip to content

U8 · Topic

Selection & supply chain

The right device bought from the wrong channel is the wrong device. This area gives vendor-neutral selection criteria: what FIPS, Common Criteria and FIDO certifications really prove, how to verify provenance, firmware update policy, spares and secure disposal.

  • Certifications
  • Provenance
  • Lifecycle

Guides in this topic

  1. Security hardware buying checklist for practitioners

    A vendor-neutral method for selecting security hardware: what FIPS 140-3, Common Criteria and FIDO certifications prove, supply-chain checks on delivery, firmware policy, spares and secure disposal.