Introduction
This web page is for vendors of Information Storage (IS) sanitization systems and provides guidance for the NSA/CSS evaluation process. These devices must undergo an evaluation performed by the NSA/CSS and satisfy the requirements mandated for the type of storage devices being destroyed. Once the assessment is successful, the device will be included in the next update of the Evaluated Product List (EPL). The EPL is meant to serve as guidance; inclusion in this document is not an endorsement by the NSA/CSS or the U.S. Government. All listed products are approved for the destruction of TS/SCI and below. If you would like to return to the CSDSR homepage, please click the link. CSDSR webpage
Requirements
The following PDFs provide information on the general process of getting a device approved and the specific requirements for each type of sanitization device. (Coming soon)
Diagram of Vendor Process
The following flow chart outlines the evaluation process.
Vendor Tracking Section
To help communicate to vendors what stage a device is at, in the CSDSR evaluation process, we created a Vendor Tracking system to show the current status of your device evaluation.
Evaluation Pending
The Pending Evaluation section will be marked completed when the following tasks are completed
- Complete set of approved submittal documents received by the NSA/CSS for review. The collection includes boundary drawing, part list, submittal application, MOU, User/Operation Guide, and website information.
- Vendor product received by the NSA/CSS and is now in the queue waiting for its turn in evaluation testing.
Evaluation
The Evaluation section will be marked completed when the following tasks are done.
- NSA/CSS Destruction Engineer assigned for Evaluation.
- The destruction Engineer performs an initial review of the product.
- The destruction Engineer will generate a test plan based on the submittal document and the appropriate requirements.
- The destruction Engineer will test the product.
Coordination
The Coordination section (this section may be iterative) will be marked completed when the following tasks are done.
- Comments coordinated by NSA/CSS reviewers and, if necessary, a consolidated set of comments sent to the Vendor.
- Update Submittal Documents (if required).
- Additional documentation (if required).
- Comments resolution by Vendor resubmission to NSA/CSS
- Determination if the product fails or passes.
Finalization
The Finalization section will be marked completed when the following tasks are done.
- If Failed
- Final resolution of testing questions submitted by the NSA/CSS.
- Letter of Failed Evaluation
- Testing summary
- If Passed
- Final resolution of testing questions submitted by the NSA/CSS.
- Letter of Successful Evaluation
- The product listed in the next update of the Evaluation Product List.
Contact
For further information, contact us by writing a message through our contact form on the CSDSR webpage