Commercial Solutions for Classified (CSfC) is the National Security Agency’s (NSA) business process for layering commercial technologies to protect classified National Security System (NSS) information. It is founded on the principle that properly configured, layered solutions can provide adequate protection of classified data in a variety of different applications. NSA has developed, approved and published solution-level specifications called Capability Packages (CPs), and works with Technical Communities from across industry, governments, and academia to develop and publish product-level requirements in US Government Protection Profiles (PPs). CSfC provides customers with an alternative approach for protecting classified information/systems.