National regulations security certifications
Some nations maintain regulations and policies to qualify devices for specific use scenarios. National legislation and policy can result in specific requirements for security that must be met in order to qualify devices for their specific use cases such as secure or restricted communications. These aforementioned use cases are often related to use by government agencies, but may also include national security-related legislation and regulation for devices to be approved for use nationwide.
Apple is actively participating in several governmental security evaluations and certifications globally.
Germany
The German federal office for information security (Bundesamt für Sicherheit in der Informationstechnik, BSI) is the agency responsible for commissioning the security evaluation and qualification of our devices for all of the German federal government entities.
The BSI has examined the general security features and the possibilities for the secure use of the devices for the iOS and iPadOS operating systems. The tests have confirmed the effectiveness of the embedded security features and concluded that the apps for Calendar, Contacts, and Mail integrated into commercial iPhone and iPad devices also complement the existing portfolio of secure mobile solutions when processing information in the classification level “Verschlusssache - nur für den Dienstgebrauch.”
The evaluation was performed by an independent laboratory and BSI, on the basis of the standards and methodology of the internationally recognized Common Criteria. The solution is known as indigo.
Check the BSI List of approved IT security products and systems to see the certification ID, and current status for indigo.
United States
The United States has policies regarding the use of devices in Government settings. These include the requirements for Common Criteria evaluations using protection profiles approved by the National Information Assurance Partnership (NIAP) and FIPS 140-3 certification for all cryptography used by the U.S. Government. The relevant certifications are given on the pages for hardware, operating systems, and app certifications.
For questions about Apple Security and Privacy Certifications, contact security-certifications@apple.com.