Product Claims Test (PCT)
Providing independent validation of a manufacturers claims made about the effectiveness of their product to sanitise data on various forms of storage media.
- Forensic verification that data cannot be recovered using different test levels.
- No limitation on media types.
- Can be hardware or software products tested.
- Holding a PCT certification provides third-party evidence that the product can be trusted to perform its intended task.
- Products with PCT certification are more trustworthy than those without verification or with self-certified capabilities.
What is a Product Claims Test?
Product Claims Test provides an entry point for organisations looking to provide their customers with verification that their sanitisation product works in a controlled environment. The process starts with a specific claim being made about the effectiveness of the product to render user data unrecoverable. This claim can select different media types, interfaces or operating systems as determined by the applicant.
The laboratory follows the test method to attest
whether the claim made is True or Not True.
How does ADISA measure threat?
To introduce structure into this process and to allow comparisons to be made, ADISA utilises a Threat Matrix which allows organisations to assess whether the testing undertaken on a particular product is sufficient for their purposes.
The threat matrix defines three test levels which in turn define a series of capabilities that a threat actor/agent may wish to bring against an asset either by direct access to the asset or access via its location within a device.
What is the difference between product claims test and product assurance test?
A product claims test is a claim is made about the suitability of a data sanitisation product to render the data on a target set of media irretrievable.
Product assurance tests sanitisation products against recognised standards NIST 800-88 and IEEE 3883.
While a product claims test ensures that the outcome of the sanitisation process is inline with the claim, product assurance tests the process as well as the outcome, analysing the specific sanitisation commands sent by the test media to the target device.
