ISO 20243 (SCRM)

ISO 20243, also known as the Open Trusted Technology Provider Standard Certification (O-TTPS), is a standard created by The Open Group. ISO 20243 provides you with peace of mind about the products you acquire for your Agency.

The O-TTPS Certification Program enables organizations that conform to the standard to be certified as Open Trusted Technology Providers.

The O-TTPS, a standard of The Open Group, provides a set of guidelines, recommendations and requirements that help assure against maliciously tainted and counterfeit products throughout commercial off-the-shelf (COTS) information and communication technology (ITC/AV) product lifecycles.

The standard includes best practices throughout all phases of a product's life cycle: design, sourcing, build, fulfillment, distribution, sustainment, and disposal, thus enhancing the integrity of COTS ITC/AV products and the security of their global supply chains.

This certification program is one of the first of its kind in providing certification for conforming to standards for product integrity coupled with supply chain security.

-The Open Group Website, July 2019

By choosing contract holders with this certification, you can lessen the risk of purchasing products that have, in some way, been contaminated during the supply chain lifecycle.

Overall, this standard and certification provides you with the assurance of:

A more reliable product
Transparency of product information
Increased protection from counterfeit products

SEWP OTTPS-NIST Supply Chain White Paper - Learn more about how SEWP used ISO 20243 and various NIST Standards and Guidelines to define the supply chain process and answer the question of whether commercial standards for supply chain risk management (SCRM) could be used by federal buyers to account for part of what is required in existing NIST documentation. This white paper provides insight into those requirements.

SEWP OTTPS-NIST Supply Chain White Paper Overview, Published 2021 (33:40)

Learn how choosing SEWP Contract Holders with O-TTPS Certification can help protect your ITC/AV procurement.

Listed below are the SEWP contract holders that have fulfilled the requirements to receive an O-TTPS certification*:

*To see the most up-to-date contract holder certifications, visit the O-TTPS Certification Register

CONTRACT HOLDER	GROUPS	ISO 20243 CERTIFICATION

To learn more about O-TTPS Self-Assessed Certification and the O-TTPS Third-Party Assessed Certification, please view The Open Group's O-TTPS Certification Program page.

For more information about the ISO 20243 Standard, view parts 1 and 2 on their website:

ISO/IEC 20243-1:2018 - Part 1: Requirements and recommendations
ISO/IEC 20243-2:2018 - Part 2: Assessment procedures for the O-TTPS and ISO/IEC 20243-1:2018