The BITS security criteria are drafted as security requirement packages and use the schema and language of the Common Criteria certification program. A security package is a set of functional and/or assurance requirements that meet an identifiable subset of security objectives.

BITS criteria documents are listed below. Inactive links indicate documents that are being revised. Revised documents will be posted as they become available. Please contact Ann Patterson, ann@fsround.org, for documents under revision.

• Common Criteria - Master Security Requirements (CC-MSR)



• BITS Common Criteria Package of Requirements for Application Products
• BITS Common Criteria Package of Requirements for Application Security Products
• BITS Common Criteria Package of Requirements for Monitoring and Intrusion Detection Systems
• BITS Common Criteria Package of Requirements for Network Security Products

BITS Product Certification Program
Overview
Security Criteria
Alignment with Common Criteria
BITS Tested Mark -
Product List
Frequently Asked Questions

"Wells Fargo intends to satisfy all of our customers' financial needs. We know retaining our customers' business depends on fulfilling their expectations for quality service, including securing their personal information and financial transactions. We regard the BITS Tested Mark as the minimum acceptable assurance that the technology products we buy meet Wells Fargo's explicit standards for security and privacy."