The structure of the MyCC Scheme is illustrated in the figure below:
Own by CyberSecurity Malaysia.
The CEO of CyberSecurity Malaysia acted as MyCC Scheme Head and responsible in:
Establishing and communicating the strategic direction for the MyCC Scheme.
Establishing the MyCC Scheme policy and rules.
Member of the MyCC Scheme Management Board and Certification Subcommittee.
Composed of at least 5 Malaysian government and industry members.
Independent from day-to-day management and operation of the MyCC Scheme.
Provide strategic advice, guidance and recommendations in relation to the overall direction and policy of the MyCC Scheme.
Impartial group delegated by the MyCC Scheme Management Board to:
Certify an ICT product, system or protection profile evaluation completed by a licensed MySEF.
Maintain or extend a certification for an ICT product or system.
Withdraw certification for an ICT product, system or protection profile.
Instigate the MyCC Scheme policy;
Manage the MyCBs department.
Established relationship with licensed MySEFs.
Manage the MySEFs department.
Established relationship with licensed MyCB.
An authorised MS-ISO/IEC 17025 signatory.
Ensuring the effective application of IT security evaluation criteria by both evaluators and certifiers.
Ensuring the highest standards of competence and impartiality are maintained and consistency is achieved across all evaluation and certification activities.
Ensuring the effective application of IT security evaluation criteria for evaluations conducted within the MySEF;
The continuous application of the MySEF Management System to the conduct of evaluations within the MySEF
Acting as an MS-ISO/IEC 17025 authorised signatory for evaluation work.
Responsible for day-to-day evaluation projects under the direction of the Senior MySEF Evaluator and in compliance with the MySEF Management System.
Responsible for the maintenance of the MyCB Management System.
Conduct reviews of the application of the management system within MyCB.
Provides outcomes of management system reviews to the MyCC Scheme Management Board in order to ensure impartiality of certification services.
Responsible for maintenance of the MySEF Management System.
Conduct reviews for the application of the management system within the MySEF.
Responsible for day-to-day evaluation projects under the direction of the Senior MySEF Evaluator and in compliance with the MySEF Management System.