Governing document that provides a comprehensive, rigorous method for specifying security function and assurance requirements for products and systems.
Source(s):
NIST SP 800-53 Rev. 4
under Common Criteria
from
CNSSI 4009
A set of internationally accepted semantic tools and constructs for describing the security needs of customers and the security attributes of products.
Source(s):
NIST SP 800-32
under Common Criteria