The Commercial COMSEC Evaluation Program (CCEP) is a development program for IA products. Under the CCEP, NSA enters into a business relationship with a vendor to develop and produce products that are of direct and obvious benefit to improving the IA posture for DoD customers.
NSA applies its limited IA resources to evaluate those products that best provide for widespread availability of quality, inexpensive, secure communications systems for use by the U.S. Government. Interested vendors must complete a CCEP Product Summary Questionnaire. The answers to that questionnaire are the basis for the CCEP decision. Information in the vendor's product proposal is measured against national IA needs and priorities to determine the suitability of a potential product.
What is the process to initiate a CCEP agreement?
- Product vendor contacts Business Affairs Office
- NSA provides vendor with Product Summary Questionnaire (PSQ)
- Vendor completes and submits PSQ
- Business case is determined
- Vendor then submits a detailed proposal
- Detailed proposal is reviewed for technology and market
- Product is accepted into program
- NSA and Vendor enter into a legal agreement
- NSA and Vendor participate in a security evaluation
- NSA certifies the security embedded within the product/service