• Site audits

Various certifications require an audit of a development and/or production site of the product. This is often arranged as part of an evaluation. SGS Brightsight can also perform site audits independent of product evaluations. The result can be reused in multiple product evaluations. This is possible for Common Criteria (STAR report) or EMVCo, for example. 

If you have a site independently evaluated, you will receive a certificate valid for two years. 

SGS Brightsight also offers Site Assessment Reports as a service for customers looking to understand the security of their sites or obtain evidence of their security capabilities.