Assurance Requirements

Criteria *

• Demonstration of functional and performance requirements

• Sampling and inspection of qualities and standards

• Analysis and verification of logic and algorithms

• Traceability of requirements through design, implementation and verification

• Management of components and activities

• Security flaw identification and evaluation

Qualities *

• Scope

• Depth

• Rigor

* Source: ISO/IEC, Common Criteria for Information Technology Security Evaluation, Version 2.0,
Part 3: Security Assurance Requirements, 1998.

Previous slide

Next slide

Back to first slide

View graphic version