Contents
What is another name for the ISO IEC 15408 standard for computer security?
Common Criteria for Information Technology Security Evaluation
The Common Criteria for Information Technology Security Evaluation (referred to as Common Criteria or CC) is an international standard (ISO/IEC 15408) for computer security certification.
What is Common Criteria protection profile?
Common Criteria is a framework in which computer system users can specify their security functional requirements (SFRs) and security functional assurance requirements (SARs) using Protection Profiles (PPs).
How many levels are there in the Common Criteria?
Functional and assurance security requirements are the basis for the Common Criteria. There are seven Evaluation Assurance Levels (EALs). The higher the level, the more confidence you can have that the security functional requirements have been met.
What is CC in cyber security?
Common Criteria (CC) is an international set of specifications and guidelines designed to evaluate information security products and systems.
What is EAL7?
Acronym. Definition. EAL7. Evaluation Assurance Level 7 (highest ranking)
What is EAL certificate?
EAL is the first awarding organisation to offer an e-certificate service accepted by ACE, and allowing direct uploads to the ACE portal.
What are EAL qualifications?
EAL are a specialist industry awarding organisation with years of experience. Their qualifications are specifically tailored to the construction industry only, with many notable electrical publications, such as the IET guides, recognising and supporting them.
Where can I find ISO / IEC 15408-1?
ISO/IEC 15408-1 was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology, Subcommittee SC 27, IT Security techniques. The identical text of ISO/IEC 15408 is published by the Common Criteria Project Sponsoring Organisations as Common Criteria for Information Technology Security Evaluation.
What is the role of ISO and IEC?
In the field of information technology, ISO and IEC have established a joint technical committee, ISO/IEC JTC 1. International Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 2. The main task of the joint technical committee is to prepare International Standards.
Who is responsible for complying with ISO 17025?
The CC was developed by the governments of Canada, France, Germany, the Netherlands, the UK, and the U.S. All testing laboratories must comply with ISO/IEC 17025, and certification bodies will normally be approved against ISO/IEC 17065. The compliance with ISO/IEC 17025 is typically demonstrated to a National approval authority:
How does the CC help in security evaluation?
1 Introduction 1The CC permits comparability between the results of independent security evaluations. The CC does so by providing a common set of requirements for the security functionality of IT products and for assurance measures applied to these IT products during a security evaluation.