UC APL

The Department of Defense (DoD) created the Unified Capabilities Approved Products List (UC APL) to identify solutions that were trusted to address government security concerns. The UC APL represents the agency’s master list of products available for purchase that are secure, trusted and approved for deployment within the technology infrastructure.
Corsec Certifications - UC APL Markets


Why Get Listed on the UC APL

For all products that are implemented into the technology infrastructure of the U.S. DoD, the government is limited to purchasing only those solutions that have completed the UC APL process.

UC APL Background

The UC APL was developed in 2011 in an effort to maintain a single consolidated list of products that have completed Interoperability (IO) and Information Assurance (IA) testing and certification. Sometimes referred to as JITC (Joint Interoperability Test Center) testing, the UC APL took the requirements of all DoD agencies/components and developed this consolidated list for government acquisition. Getting a product included on this coveted list involves a rigorous 39-step process overseen by the Unified Capabilities Certification Office (UCCO).

UC APL Common Questions

How Do I Get Listed on the UC APL?

To be included on the UC APL, products must complete a 39-step process overseen by the Unified Capabilities Certification Office (UCCO).

The process includes:

  • Submission of properly completed forms and product documentation
  • Attainment of prerequisite validations and certifications such as FIPS 140-2 and Common Criteria
  • Adherence to strict scheduling guidelines and interdependencies.

The specific requirements for a given product depend on its security category and are defined in the UC APL’s Security Technical Information Guides (STIGs). Products also must pass Information Assurance (IA) and Interoperability (IO) tests conducted at one of the Testing Centers of Excellence.

These tests are intended to ensure that a product meets the required level of security and integrates into an existing infrastructure without introducing operational risk.

[collapse]
How Much Does Getting Listed on the UC APL Cost?

Costs vary greatly, depending upon the complexity of the product. Additionally, poor planning and failure to properly execute a plan have resulted in some staggering sums being spent on the listing process.

Figuring out how much UC APL listing will cost is one of the most important activities when planning an evaluation effort.

[collapse]
How Long Will it Take to Get on the UC APL?

A typical UC APL effort will take anywhere from nine to twelve months from start to finish. This will depend heavily on certain factors: ROI, Cost, Product Changes, Certification Options, Timing, Customer Requirements, New Business Areas, and a Competitive Analysis.

[collapse]

What Now

Corsec offers solutions to help clients better understand how and what certifications are right for each product. We can help determine the best path to being listed on the UC APL given your product’s unique market drivers, competitive landscape and primary goals.

Corsec UC APL Process

Call Corsec +1 703 267 6050