Iso Iec 15408 Pdf

ISO/IEC 15408, universally known as the Common Criteria (CC)

ISO/IEC 15408, commonly known as the Common Criteria (CC), is the international standard for evaluating the security properties of IT products and systems. It provides a rigorous, standardized framework for vendors to demonstrate that their products meet specific security requirements through independent, third-party assessment.  Core Structure of ISO/IEC 15408  iso iec 15408 pdf

Limitations and Considerations

• Certification cost and time increase substantially with higher EALs.
• A certified product’s assurance is limited to the evaluated configuration and documented assumptions about the operating environment.
• The CC focuses on specified functionality and assurance evidence; it does not guarantee absolute security in all operational contexts.

ISO/IEC 15408, widely known as the Common Criteria (CC), is the international standard for evaluating the security functionality and assurance of IT products and systems. The standard provides a framework for consumers to specify security requirements and for developers to have their products independently evaluated. Structure of ISO/IEC 15408 (2022 Edition) ISO/IEC 15408, universally known as the Common Criteria