Hitachi Vantara Earns Common Criteria Certification for VSP One Block, Providing Enhanced Data Resilience for Regulated Enterprises

Certification helps government agencies and organizations in highly regulated industries meet stringent security requirements and reduce risk during compliance assessments
Milestone highlights Hitachi Vantara's broader cyber resilience solutions, anchored in resilient data infrastructure and supported by advanced data protection, detection and recovery capabilities
Hitachi Vantara's data resilience approach aligns with the NIST Cybersecurity Framework 2.0, while VSP One Block is backed by a 100% Data Availability Guarantee, with qualifying systems also covered by a Cyber Resilience Guarantee that provides a 100% clean recovery point following a cyberattack.

SANTA CLARA, Calif., Oct. 6, 2026 /PRNewswire/ -- Hitachi Vantara, the data storage, infrastructure and hybrid cloud management subsidiary of Hitachi Ltd. (TSE: 6501), today announced that its Virtual Storage Platform One (VSP One) Block platform has achieved Common Criteria (ISO/IEC 15408) certification, providing independent, internationally recognized validation of critical security capabilities, including cryptographic support, identification and authentication, security management and trusted communications. The certification gives government agencies and organizations in highly regulated industries additional assurance that VSP One Block has been independently evaluated against comprehensive security requirements as they assess infrastructure supporting sensitive and mission-critical data.

Click here to learn more about Hitachi Vantara's cyber resiliency solutions:
https://www.hitachivantara.com/en-us/solutions/data-protection-cyber-resiliency

A resilient data foundation is increasingly critical to help organizations maintain business continuity, manage cyber and regulatory risk and prepare data for AI. Rapid AI adoption, evolving data sovereignty requirements and a growing regulatory landscape are raising the stakes for how organizations govern and protect critical data, increasing scrutiny of the vendors and infrastructure they rely on. According to recent industry research, only 38% of organizations have established sovereignty governance and 46% have established technical architecture, while 43% cite technical hurdles as a key obstacle, up from 26% in 2025. For organizations responsible for critical or regulated data, independent validation can provide objective evidence that technology has been evaluated against established requirements, helping support vendor assessments, procurement processes and broader risk management efforts.

Common Criteria is an international standard for evaluating the security capabilities of information technology products against defined requirements. The certified VSP One Block systems were evaluated against the collaborative Protection Profile for Network Devices (NDcPP) Version 3.0e, which includes requirements for security auditing, cryptographic support, identification and authentication, security management and trusted communications. The certification was issued under the Japan IT Security Evaluation and Certification Scheme (JISEC), administered by the Information-technology Promotion Agency (IPA), Japan, following evaluation by ECSEC Laboratory Inc. JISEC is a Certificate Authorizing Scheme under the Common Criteria Recognition Arrangement (CCRA), which provides for mutual recognition of Common Criteria certificates among participating nations.

"Organizations are under immense pressure to demonstrate that the technology supporting their most critical data has been proven to meet rigorous security standards," said Octavian Tanase, chief product officer, Hitachi Vantara. "Common Criteria provides independent validation of the critical security capabilities of VSP One Block, and it is another proof point in the broader data and cyber resilience solutions we have built across the VSP One portfolio, helping customers protect critical information, reduce risk and strengthen organizational resilience across operational, financial and governance priorities."

From Security Validation to Outcome-Backed Cyber Resilience
The certification reaffirms Hitachi Vantara's broader commitment to delivering trusted cyber resilience solutions. Hitachi Vantara takes a layered approach to data security and resilience, combining independent validation with technologies and services designed to mitigate cyber and regulatory risk and enable rapid, clean recovery following a cyberattack.

Key elements of this approach include:

Alignment with recognized cybersecurity frameworks: Hitachi Vantara's approach to data resilience aligns with the NIST Cybersecurity Framework 2.0, including capabilities to protect hardware, software, networks and data; identify weaknesses; detect intrusions and malware; respond to attacks; and support rapid, clean data recovery at scale. This includes risk-optimized data resilience zones that organize critical data based on business risk and regulatory needs, helping organizations strengthen governance and compliance.
Independent security validation: Hitachi Vantara has previously achieved alignment with the U.S. government's Secure Software Development Framework (SSDF), as outlined by NIST. The SSDF alignment was independently validated through a third-party attestation process and confirmed by the Cybersecurity and Infrastructure Security Agency (CISA). Hitachi Vantara is also a CISA Secure by Design pledge signatory, reinforcing its commitment to building security into products from the outset.
Layered data protection and threat detection: VSP One Block combines immutable data protection with Ransomware Detection powered by CyberSense^®, which provides 99.99% accurate ransomware data corruption detection and clean snapshot identification. Together, these capabilities help organizations detect suspicious activity, protect critical information and identify clean data for recovery.
Outcome-backed resilience andrecovery: Hitachi Vantara backs VSP One with a 100% Data Availability Guarantee, while qualifying VSP One Block systems are covered by a Cyber Resilience Guarantee that provides a 100% clean recovery point following a cyberattack. This defense-in-depth approach helps reduce the operational and business impact of disruption.

"Government organizations need confidence that the infrastructure supporting critical missions has been evaluated against recognized security requirements," said Mark Serway, president and CEO of Hitachi Federal. "Independent certifications such as Common Criteria provide another important source of assurance during technology evaluation, while Hitachi Vantara's broader cyber resilience capabilities help agencies protect access to critical data and maintain continuity when disruptions occur."

The VSP One Block certification, JISEC-C0870, was granted June 19, 2026, under Common Criteria Version 3.1 Release 5 and the collaborative Protection Profile for Network Devices Version 3.0e. The certification applies to VSP One B20 and is valid through June 19, 2031.

For more information about Hitachi Vantara's approach to security, privacy and compliance, please visit: https://www.hitachivantara.com/en-us/trust-center.

Additional Resources

Connect with Hitachi Vantara

About Hitachi Vantara
Hitachi Vantara is transforming the way data fuels innovation. A wholly owned subsidiary of Hitachi Ltd., Hitachi Vantara provides the data foundation the world's leading innovators rely on. Through data storage, infrastructure systems, cloud management and digital expertise, the company helps customers build the foundation for sustainable business growth. To learn more, visit www.hitachivantara.com.

About Hitachi Federal
Hitachi Federal is the trusted leader in mission-centric digital solutions for the U.S. federal government. The company strengthens the mission critical infrastructure and operations of the United States through data center modernization, AI acceleration, data management, hybrid cloud enablement, and cyber resiliency. Powered by Hitachi's engineering and technology leadership, Hitachi Federal helps federal agencies modernize how they operate and deliver on their mission. Hitachi Federal is a wholly owned subsidiary of Hitachi Digital, LLC. Visit us at hitachifederal.com.

About Hitachi, Ltd.
Through its Social Innovation Business (SIB) that brings together IT, OT (Operational Technology) and products, Hitachi aims to be a global leader in continuously transforming social infrastructure through digital, contributing to a harmonized society where the environment, wellbeing, and economic growth are in balance. Hitachi operates worldwide across four sectors – Digital Systems & Services, Energy, Mobility, and Connective Industries – as well as a Strategic SIB Business Unit focused on new growth areas. With Lumada at its core, Hitachi creates value by combining data, technology and domain knowledge to solve customer and social challenges. Revenues for FY2025 (ended March 31, 2026) totaled 10,586.7 billion yen, with 606 consolidated subsidiaries and approximately 290,000 employees worldwide. Visit us at www.hitachi.com.

HITACHI is a trademark or registered trademark of Hitachi, Ltd. All other trademarks, service marks, and company names are properties of their respective owners.

View original content to download multimedia:https://www.prnewswire.com/news-releases/hitachi-vantara-earns-common-criteria-certification-for-vsp-one-block-providing-enhanced-data-resilience-for-regulated-enterprises-302897788.html

SOURCE Hitachi Vantara