BlackBerry Blog

NIAP-Certified Security: A Foundation for Trusted Communications

In government and critical infrastructure, security is not an optional feature, it is the foundation of operational integrity. For organizations responsible for protecting sensitive data and ensuring mission continuity, trust in communication systems must be earned through independent, rigorous validation. Relying on unvetted software introduces unacceptable risks to national security and public safety.

As a long-standing holder of NIAP certification from the National Security Agency (NSA), BlackBerry demonstrates its steadfast commitment to the highest standards of security. This distinguished recognition goes beyond a technical milestone; it underscores BlackBerry’s leadership in secure communications and its dedication to safeguarding the nation’s most critical operations.

Understanding NIAP Certification

The National Information Assurance Partnership (NIAP) is the United States government initiative responsible for evaluating commercial IT products for use in national security systems. NIAP certification provides formal confirmation that a solution has undergone exhaustive, independent testing and meets the stringent security requirements defined by the U.S. government.

Achieving NIAP certification is a demanding process. It requires adherence to strict technical specifications, comprehensive design analysis, and thorough vulnerability assessments. This certification ensures that products are equipped to defend against sophisticated threats in high-stakes environments. For decision-makers, it simplifies procurement and guarantees that a solution meets a recognized baseline for security and performance.

BlackBerry’s Leadership in Security Standards

BlackBerry is the only Secure Communications provider with NIAP-certification, also approved under Common Criteria (International Standard ISO/IEC 15408) and Commercial Solutions for Classified (CSfC). Together CC and CSfC provide a framework of approvals for secure communications solutions. The NSA brought together these approvals under the NIAP certification process.  

The NIAP Certification Process Explained

The journey to NIAP certification is governed by the highest standards of transparency and rigor.

  1. Project Initiation: BlackBerry engages a NIAP-approved Common Criteria Testing Laboratory (CCTL) and aligns the solution with a relevant Protection Profile, a document defining security requirements for a specific technology class.

  2. Scheduled Reviews: NIAP conducts regular checkpoints to ensure the evaluation remains aligned with technical and policy expectations

  3. In-Depth Evaluation: The CCTL performs detailed testing, including vulnerability analysis, documentation review, and functional validation to confirm all security claims.

  4. Final Assessment: NIAP experts review all evaluation evidence to verify full compliance with the established standards.

  5. Certification: Once validated, the product is added to the NIAP Product Compliant List, making it available for procurement by government agencies.

This methodical process provides assurance that every certified product meets the highest standards for protecting national security systems.

Protection Profiles and Evaluation Assurance Levels (EALs)

NIAP certification uses Protection Profiles to define the specific security functions required for different operational contexts, such as national defense or critical infrastructure protection. This ensures that solutions are evaluated against requirements that are directly relevant to their intended use.

Products are also assessed based on their Evaluation Assurance Level (EAL), which indicates the depth and rigor of the evaluation. These levels help organizations select solutions that align with their specific risk profiles and operational needs, from basic functional testing (EAL 1) to extensive design verification for high-risk, mission-critical systems (EAL 5).

The Strategic Advantages of NIAP-Certified Solutions

Selecting a NIAP-certified solution like BlackBerry® Secure Communications offers clear operational and strategic benefits for organizations.

1. Security and Operational Assurance

BlackBerry’s NIAP-certified solutions deliver robust, multi-layered protection against sophisticated cyber threats. By safeguarding both the content and metadata of communications, they minimize your organization’s exposure and help ensure operational continuity, even in contested environments. This provides the assurance needed for secure voice and text for mission-critical operations.

2. Streamlined Procurement and Compliance

NIAP certification simplifies the procurement process for federal agencies and defense contractors. It provides a clear, recognized standard of security, streamlining compliance with mandates such as the DoDIN Approved Products List (APL) and the NSA CSfC program. This allows organizations to acquire and deploy trusted technologies more efficiently.

3. Data Sovereignty and Control

Certified solutions are designed to support data sovereignty, ensuring that your sensitive information remains under your control and is protected from foreign access or interference. BlackBerry enables sovereign-controlled communication systems that place governance firmly in the hands of organizations, eliminating reliance on third-party infrastructure.

BlackBerry: A Trusted Partner in National Security

BlackBerry’s commitment to NIAP certification reflects a larger mission: to empower governments, defense agencies, and critical infrastructure operators with solutions that meet the highest standards of security and reliability. This commitment is supported by decades of experience, transparent validation processes, and a culture of accountability. BlackBerry does not simply meet regulatory requirements; it sets the benchmark for secure communications.

In mission-critical environments, security cannot afford to fail. NIAP-certified solutions are specifically designed to meet the rigorous demands of national security systems, delivering unparalleled assurance, resilience, and trust. For organizations that require truly secure communications, NIAP-certified solutions are not just valuable, they are essential.

Christine Gadsby

About Christine Gadsby

Christine Gadsby is Cybersecurity CISO at BlackBerry. Follow Christine on X @christinegadsby