The BITS Product Certification Program criteria are developed collaboratively by experts at financial institutions, technology providers and regulatory and government agencies. The criteria represent the minimum baseline security features and functionality of various types of commercial software products. Criteria are developed for certain classifications of products based on function and application (see below).

While the criteria were created for testing purposes, many BITS member organizations use the criteria for technology procurement, as well as in proposals and internal development projects.

Master Security Criteria
Master Security Criteria provide detailed product security requirements for a set of security features, including: identification, non-repudiation, authorization, confidentiality, data and system integrity, data disposal, audit, authentication, security administration, guidance documentation, security functionality and scalability. These overall security requirements and functions are expected in all classes of products.

Download:

• Download MSC Version 3.0
• Download MSC Version 1.1

Product Profiles
Product profiles contain criteria that apply to a class and/or sub-classification of products. The criteria in these profiles contain many, if not all, of the master-level criteria as well as more specific criteria that apply exclusively to products in that specific product class.

• Application Products
(Maps to MSC 3.0)
• Authentication Systems
(Maps to MSC 1.1)
• Access Control
(Maps to MSC 3.0)
• Application Security Products
(Maps to MSC 3.0)
• Monitoring and IDS
(Maps to MSC 3.0)
• Network Security Products
(Maps to MSC 3.0)

BITS Product Certification Program
Overview
Security Criteria
Alignment with Common Criteria
BITS Tested Mark -
Product List
Frequently Asked Questions

"Wells Fargo intends to satisfy all of our customers' financial needs. We know retaining our customers' business depends on fulfilling their expectations for quality service, including securing their personal information and financial transactions. We regard the BITS Tested Mark as the minimum acceptable assurance that the technology products we buy meet Wells Fargo's explicit standards for security and privacy.