Assurance Levels

MASA assurance levels classify the security of an application based on the confidence that it complies with MASA requirements. Higher assurance levels indicate greater confidence in the implementation of required MASA controls. MASA offers two distinct assurance levels: AL1 and AL2. All requirements must be satisfied for every level. The only difference between each level is the assessment method that applies.

MASA Assurance Levels
Figure 1: MASA Assurance Levels
Level Name Estimated Lab Hours Cost Description
AL2
 Lab Evaluation 32 $3,000 to $6,000 During this assessment, the authorized lab will thoroughly test and validate compliance with all MASA requirements through a manual review process.
AL1
 Verified Self Attest 8 $500 During this assessment, the authorized lab will scan the application and provide a questionnaire to the developer to complete self-declarations and provide evidence.