TSMC Achieves ISO/IEC 15408 EAL6 Certifications to Help Customers Capture the Market Opportunities
Digital technology development unlocked the growing demand on information security products, such as chip passports, ID cards, smart cards, and electronic payments. Obtaining an ISO/IEC 15408 security certification has become a key factor to determine whether those security products can go to market for sale. TSMC supports customers to achieve the certification for their information security products, and has also obtained the security certification by establishing frontend to backend manufacturing capabilities which results in a faster time-to-production without multiple re-certifications during the production period. As one of the first semiconductor company achieves such certification in Taiwan, TSMC has 4 GIGAFAB facilities and 2 Backend Fabs obtained the certification of ISO/IEC15408 at evaluation assurance level (EAL) 6 by June 2021. TSMC is now fully capable for productions that require higher security standards to ensure a more secured end-product.
ISO/IEC 15408 EAL6 security certification is a key factor to manufacture the security chip product. TSMC’s achievement of such a security certification is a recognition of TSMC’s capability to ensure security products production process meeting the highest security standard of information protection and information security control, and will also help our customers launch their security product more quickly and cost effectively.
Cross-functional Collaboration to Introduce ISO/IEC 15408 Standard and Improve the Overall Information Security Management
The certification for TSMC frontend to backend integration capabilities covers a wide range of service from wafer mask design, mask manufacturing, wafer production to wafer storage, shipment, scrap, and downstream wafers. It also contains wafer testing, wafer bumping, physical environment security, information protection, system security, product security and other procedures that must be fully controlled and protected. TSMC formed an ISO/IEC 15408 task force team with members from different organizational units to ensure the full compliance of production lines to the ISO 15408 criteria. The goal is to enhance information security and ensure a completely secured production environment through PDCA (Plan-Do-Check-Act) cycle.
Cross-functional Collaboration to Achieve ISO/IEC 15408 Certification

Accelerate Customer’s Security Product Launch by Continuously Obtaining ISO/IEC 15408 Certifications
An ISO/IEC 15408 certification is given in two major forms: Product Certification and Site Certification. Every year, TSMC achieves the product certification after third-party auditors’ review and exam on chip products that meet higher security standards. TSMC Fabs that obtained product certification are Fab 12A, Fab 15A, and Fab 18A. Site certification was obtained by TSMC Fabs including Fab 12B, Fab 14A, Fab 14B, Fab 15B, Advanced Backend Fab 2, and Advanced Backend Fab 5. Thus, TSMC customers do not need to spend any time to achieve the certification for their products and can launch their products more quickly and cost-effectively.
TSMC Fabs with ISO/IEC 15408 Certification

TSMC plans to obtain ISO/IEC 15408 certification for its Fab 15A by the end of 2021. In 2022, TSMC plans to obtain the certification for its Advanced Backend Fab 6 (under construction) and GIGAFAB expansion area to enhance capacities on security product manufacturing and protection. TSMC continues to be customer-oriented and maximize best practices to become a long-term important partner that customers can trust and rely on for success.