Qualification of digital security service providers
The FSSNQ (qualification framework for Digital Security Service Providers) is managed by Benin's Information Systems and Digital Agency (ASIN). It aims to qualify providers that operate security services (audit, incident detection, secure hosting...) on behalf of third parties, on a principle similar to the security provider qualification schemes found in other countries.
Why a qualification, beyond a product certification
Unlike a management system certification such as ISO 27001, a provider qualification assesses the real operational capacity to deliver a security service over time - team skills, internal processes, management of service commitments. It is a mark of trust sought by organizations, especially public ones, that outsource a sensitive security function.
An approach built on familiar foundations
Organizations already pursuing ISO 27001 or the PSSIE will find familiar requirements in the FSSNQ on access management, logging and incident management - the qualification adds a layer of requirements specific to the nature of the security service provided, to be documented and validated specifically.
Suggestion provided for educational purposes - human validation required. This guide does not constitute legal advice and does not replace an accredited external auditor.