BSI Kitemarkâ„¢ certification for secure digital applications

BSI Kitemarkâ„¢ certification for secure digital applications

       

       
Red Overlay
BSI Kitemarkâ„¢ for Secure Digital Applications
Digital Applications Kitemark hero 375x275px.jpg
Red Overlay

Want to know more about Kitemark certification?

Contact us

Making digital applications secure

BSI Kitemark™ certification for secure digital applications

Mobile and web applications (apps) have been observing rapid growth in the recent years. This is driven by the functionality and ease of use in our daily life as well as business environment. Driven by the exceptional growth in use of smartphones, tablets, and other media devices; as well as the increasing availability of high-speed internet connectivity.


Mobile, web applications and software programs are designed to run on different platforms and devices, allowing users to perform various tasks – accessing information, enabling transaction handling or even financial services. However, with new technological developments, both users and businesses face a whole array of new risks that need to be addressed to protect users personal and financial data as well as brand reputation.


To address these challenges in an evolving market, BSI offers its clients tailored testing and certification to address the latest cyber threats and vulnerabilities.

Secure Kitemark – the role of third party certification to build digital trust

Depending on mobile or web app functionality we offer:

secure-digital-table-graphic2-450x420.jpg

We offer various levels of certification for mobile and web applications.

For web applications: 

Level 1 is a bare minimum that all applications strive for. It is also useful as a first step in a multi-phase effort or when applications do not store or handle sensitive data and therefore do not need the more rigorous controls of Level 2 or 3.

An application achieves Level 2 if it adequately defends against most of the risks associated with software today. Level 2 ensures that security controls are in place, effective and used within the application. Level 2 is typically appropriate for applications that handle significant business – to – business transactions, including those that process healthcare information, implement business-critical or sensitive functions, or process other sensitive assets.

Level 3 is the highest level of verification. This level is typically reserved for applications that require significant levels of security verification, such as those that may be found within areas of military, health and safety, critical infrastructure, etc. Organizations may require Level 3 for applications that perform critical functions, where failure could significantly impact the organization’s operations.

For mobile applications:

A mobile app that achieves Level 1 adheres to mobile application security best practices. It fulfils basic requirements in terms of code quality, handling of sensitive data, and interaction with the mobile environment. A testing process must be in place to verify the security controls. This level is appropriate for all mobile applications.

Level 2 introduces advanced security controls that go beyond the standard requirements and include threat models and controls. This level is appropriate for apps that handle highly sensitive data, such as mobile banking apps.

Mobile application achieving Level 3 is the app that has state-of-the -art security. This level is applicable to apps that handle highly sensitive data and may serve as a means of protecting intellectual property or tamper -proofing an app.

BSI Kitemark schemes

BSI Kitemark schemes are based on industry established standards and include requirements of

  • ASVS (The Application Security Verification Standard)
  • MASVS (The Mobile Application Security Verification Standard)
  • OWASP (The Open Web Application Security Project)

Contact us

Simply fill in the form below and a member of our product certification team will be in touch: