ISO/IEC 19790 in Practice: Real-World Lessons from Turkiye’s First Crypto Module Test (C22c)
The successful completion of the first ISO/IEC 19790-based cryptographic module test in Turkiye serves as a key case study for building advanced compliance capabilities within a developing ecosystem. This pioneering effort required close coordination among all stakeholders to carefully align the rigorous, internationally recognized requirements of the ISO/IEC 19790 standard with evolving national security and certification mandates. Key lessons learned centered on the technical challenges of adapting evaluation methodologies to meet this hybrid compliance framework, rapidly establishing a domestic testing infrastructure capable of meeting international expectations, and effectively navigating a dynamic regulatory environment. This talk summarizes these practical insights to help organizations streamline and accelerate their own ISO/IEC 19790 certification processes.