Trusted Integrator List

Criteria for CSfC Integrators

Click here to download the updated criteria and application for CSfC Integrators. These criteria and processes are defined to provide a common baseline for CSfC solution integrators, enabling NSA, AOs/Designated Approving Authorities (DAAs) to assess the capabilities of solution integrators and accept their results. Interested integrators may submit their application to CSFC_Integrators@nsa.gov. Questions may be submitted to the same email address.

Click here for the listing of Archived Trusted Integrators. Companies on the Archived Trusted Integrators List no longer have a formal relationship with the CSfC PMO.

Attention Integrators: While CSfC encourages industry innovation, trustworthiness of the components is paramount. Customers and their integrators are advised that modifying a NIAP-validated component in a CSfC solution may invalidate its certification and trigger a revalidation process. To avoid delays, customers or integrators who feel it is necessary to modify a component should engage the component vendor and consult NIAP through their Assurance Continuity process to determine whether such a modification will affect the component's certification. In case of a modification to a component, NSA's CSfC Program Management Office will require a statement from NIAP that the modification does not alter the certification, or the security, of the component. Modifications that will trigger the revalidation process include, but are not limited to: configuring the component in a manner different than its NIAP-validated configuration; and modifying the original equipment manufacturers' (OEM's) code (to include digitally signing the code).

Attention CSfC Customers: Please ensure that all submitted registration packages contain solution diagrams. If sending .zip files, please follow-up with the CSfC PMO at csfc@nsa.gov to ensure the file(s) were successfully received. Also, please advise us when you are deciding to implement a CSfC solution. We would like to ensure your solution can be registered as quickly as possible for approval. However, deviations discovered at the end of the process can be time-consuming for you and resource-intensive for NSA. Please email the CSfC team at csfc_register@nsa.gov.