Commercial Solutions for Classified (CSfC)

The National Security Agency’s (NSA) Commercial Solutions for Classified (CSfC) Program enables commercial products to be used in layered solutions that protect classified National Security System (NSS) information.

To meet today's mission objectives, U.S. Government customers have increasing need of the most modern commercial hardware and software technologies. The National Security Agency's (NSA) Commercial Solutions for Classified (CSfC) Program was created to enable the use of commercial products in layered solutions, capable of protecting classified National Security Systems (NSS) information.

Although the NSA's strategy for protecting classified information continues to employ both commercially-based and traditional Government-off-the-Shelf (GOTS) Information Assurance (IA) solutions, the Information Assurance Directorate (IAD) looks first to commercial technology to formulate solutions that assist customers in protecting classified information. This approach yields solutions that can be fielded in months instead of years.

For customers/integrators, the Information Assurance Directorate (IAD) program produces guidance documentation called Capability Packages, which describe solution-based implementation. For vendors who want to build products eligible for inclusion on the CSfC Components List, guidance documents called Protection Profiles describe the necessary security requirements.

To learn more about the CSfC program, please visit the Commercial Solutions for Classified (CSfC) web site on

Last Reviewed: 13 May 2015