Security Product Assurance (SPA) is a programme to instil a vibrant infocomm security ecosystem for IT security certification in Singapore, with the following major targets:

• Prepare the ground (e.g. by lowering the barriers through national certification scheme and providing learning tools and information materials )
• Allow differentiating factors for SCCS
• Promote international best practices (e.g. certification and adopting international standards)

Under SPA, all schemes are in alignment with each other and provide extensions or support for each other. Therefore they share a common core of principles, terminology, model, and approach. This core is based on the Common Criteria (CC), an international standard for IT security product evaluations and certifications.

Since 2005, Singapore is a member of the CCRA and recognises CC-certificates from authorised and certificate issuing members. Additionally, IDA operates a Certification Body (CB), which is responsible for all schemes and certifications under SPA.

The SCCS Scheme, which is the core of SPA, will provide international recognition for the certificates in the near future. The SCCS is a critical part of IDA's effort to enable and certify the development of internationally compliant security products in Singapore. "Its establishment is also one of the strategic thrusts under the Infocomm Security Masterplan to build capabilities that can defend Singapore's critical infrastructure from cyber attacks, and to maintain a secure infocomm environment for the government, businesses and individuals."

SPA currently provides the following certification schemes:

Simplified Security Criteria (SSC) ^{Updated - Aug 12}

Singapore Common Criteria Evaluation and Certification Scheme (SCCS) ^{Updated - Apr 12}