About the Solution Providers - S.A.F.E. Program
An initiative tailored to address the intricate security challenges plaguing modern data centers. In today's landscape, data centers host a myriad of processing devices and peripheral components, each running updatable software, firmware, or microcode, both internally and externally. The critical need for robust security assurance in the provenance, code quality, and software supply chain of these firmware releases and patches is paramount.
The OCP S.A.F.E. Program is engineered to streamline security audits, providing a centralized framework to ensure conformance and reliability for device consumers. By reducing redundancy and overhead in security assessments, the program aims to foster greater confidence in the security posture of hardware and firmware components across the supply chain. Device manufacturers and security review providers (SRPs) work together under the S.A.F.E. framework to produce short form security audits which are available alongside OCP S.A.F.E. approved devices on the OCP Marketplace. The diagram below shows the interaction and engagement within the program among the various members.
View approved SAFE SRP's on GitHub
| OCP Security Appraisal Framework & Enablement |
|
Slides |
| Video |
Who Should Join?
- Third party security audit firms
- Device manufacturers
- System Integrators who resell or integrate devices
Have products approved as OCP S.A.F.E.
Become an OCP Approved Security Review Provider (SRP)
OCP Accepted and OCP Inspired
OCP Accepted™ - A product can be recognized as OCP Accepted™ if it complies with an approved OCP specification AND design files have been contributed (Design Package Guidelines).
OCP Inspired™ - A product can be recognized as OCP Inspired™ if it complies with an approved OCP specification or other types of contribution; HOWEVER, no design files have been contributed.
OCP Accepted™ or OCP Inspired™ products have been demonstrated and meet 4 or more of the OCP tenets-efficiency, openness, impact, scale and efficiency.
All levels of OCP membership are eligible for OCP Accepted™ and OCP Inspired™ recognition.
OCP Ready
The OCP Facility Recognition program is intended to brand your facilities to be OCP Ready. Guidelines were created by our Data Center Facility Project Team and serve as a reference for data center operators and tenants who want to understand the fundamental facility requirements to deploy this gear into their IT space. Facilities that meet these guidelines and approved by the OCP DC Facilities Project receive the certification as an OCP Ready facility.