TRTEST Test and Evaluation Inc.
Cyber hygiene certification through major/minor finding reports, closure plan process, and 1-year validity with interim audits.
TRTEST Testing and Evaluation Inc. and the TRTEST List of Certified Products
In the processes conducted by TRTEST Testing and Evaluation Inc., after the organization’s cybersecurity hygiene level has been determined, during the closing meeting; detailed information is provided regarding positive observations and non-conformities to be reported (major, minor, and observations). A written and/or verbal agreement is reached with the organization regarding non-conformities.
If a major finding is reported during the audit, the organization is not issued a certificate at this stage. Within 2 (two) weeks following the completion of the audit, the organization must submit a closure plan addressing the major finding. If the corrective action plan is deemed sufficient, a re-inspection is conducted no later than 90 (ninety) days after the initial inspection, on a one-time basis; if all findings have been fully addressed, the organization becomes eligible to receive certification.
If minor findings are reported, the certification process is completed after the organization’s submitted corrective action plans are approved; however, during the next interim audit, it is first verified whether these findings have been addressed. If they remain unaddressed, the relevant findings are classified as major.
Reported observations do not directly affect certification; however, during the interim audits to be conducted the following year, it is assessed whether the organization has implemented these observations.
If the organization fails to meet the requirements of the level it applied for but meets the requirements of lower levels, certification is issued at the level it can meet. Thus, the organization’s current maturity level is documented in a transparent and measurable manner.
Other Certificates Provided by TRTEST
TRTEST Testing and Evaluation Inc. offers various testing and evaluation services under the following standards and conducts certification activities in the relevant fields:
ISO 4967, EN 10247, DIN 50602, ASTM E45, ISO 643, DIN 50601, ASTM 1382, TS EN ISO 6506, TS EN ISO 6508, ASTM E92, ASTM E18, TS EN ISO 6507-1, TS EN ISO 4545-1, TS ISO 9385, TS 6503, TS EN ISO 6892-1, TS 206, TS 6936, EN 24506.
Certificate Validity Period
The validity period of the cybersecurity hygiene certificate is 1 (one) year. Near the end of the certificate’s validity period, if the organization requests an extension, TRTEST conducts an interim audit of the organization. Based on the results of the interim audit, the organization’s certificate validity is extended by an additional 1 (one) year.
Why TRTEST Cybersecurity Hygiene Certification?
Since 2019, through meetings and workshops involving the Presidency of Defense Industries, TRTEST, and relevant product group manufacturers, laboratories, and academia from the Turkey Cybersecurity Cluster, a comprehensive study has been conducted to determine the criteria that cybersecurity product groups must meet.
The 11 product group criteria completed under the Turkey Cybersecurity Cluster’s Cybersecurity Products Testing and Certification Project are as follows:
- Firewall
- SIEM
- DLP (Data Loss Prevention)
- Vulnerability Management
- Cyber Threat Intelligence
- Endpoint Security (EPP / EDR)
- Governance, Risk, and Compliance (GRC)
- Secure Messaging
- Identity and Access Management
- Video Conferencing
- IoT Criteria
Within the product families listed above, products that have been tested according to TRTEST criteria and have successfully passed these tests are eligible to receive the TRTEST Product Conformity Certificate.
TRTEST Testing and Evaluation Inc. also offers testing, evaluation, and certification services related to the following standards:
ISO 4967, EN 10247, DIN 50602, ASTM E45, ISO 643, DIN 50601, ASTM 1382, TS EN ISO 6506, TS EN ISO 6508, ASTM E92, ASTM E18, TS EN ISO 6507-1, TS EN ISO 4545-1, TS ISO 9385, TS 6503, TS EN ISO 6892-1, TS 206, TS 6936, EN 24506.
Go to the Cyber Hygiene Page
Want to learn more about this service?
Our expert team will reach out for a free consultation as soon as possible.