7 Interesting Facts About Common Criteria

Home Business Magazine Online

Common Criteria for Information Technology Security Evaluation (CC) is an internationally accepted and scalable set of cybersecurity certification standards (ISO 15408). Common Criteria certification ensures that the assessments of the relevant IT product were completed to consistently high criteria, in a rigorous, standardized, and repeatable manner. This article provides insight into this topic and presents 7 interesting facts about Common Criteria.

1. Internationally recognized IT security certification

Originally, Common Criteria was developed in collaboration with six countries: Germany, France, the United Kingdom, the Netherlands, Canada, and the United States. Today, Common Criteria are the driving force behind the broadest mutual acceptance of secure IT products available. It is recognized by the 31 CCRA member countries and valued by their Federal and Government entities.

2. CC evaluation process can improve the assessed IT product

The Common Criteria evaluation process enhances an IT product or system by exposing vulnerabilities that may be fixed before introducing it to the market. This also helps to avoid costly post-release updates. Furthermore, Common Criteria certification is an effective tool for keeping the business environment competitive. In order to compete with other well-established cybersecurity solutions that have previously been assessed, CC evaluation and certification are critical for the given IT product.

3. Three essential parties are involved in a Common Criteria certification process

There are three primary parties involved in the Common Criteria evaluation process:

  1.  The Certification Body is responsible for issuing Common Criteria certifications.
  2.  Sponsors and developers that submit their system or IT product for evaluation. In the case of large companies, this role is often the same.
  3.  The independent and authorized laboratory that carries out the assessment.

4. A total of 7 Evaluated Assurance Levels are defined in the Common Criteria

Before starting the assessment procedure, the Sponsor or Developer has to select the Evaluated Assurance Level against which the Common Criteria evaluation will be performed.

There are 7 EAL levels defined in the Common Criteria:

  • EAL1: Functionally Tested
  • EAL2: Structurally Tested
  • EAL3: Methodically Tested and Checked
  • EAL4: Methodically Designed, Tested, and Reviewed
  • EAL5: Semi-Formally Designed and Tested
  • EAL6: Semi-Formally Verified Design and Tested
  • EAL7: Formally Verified Design and Tested

5. There is a slow but steady growth in the number of Common Criteria certifications worldwide

Since 2010, a total of 1645 IT products have been certified, with 589 of them being ICs, smart cards, smart card-related devices, and systems. Other popular product categories include Network and Network-Related Devices (237 Common Criteria certifications) and Multi-Function Devices (233 CC certifications). Aside from these, several Operating Systems, Databases, Access Control Devices, Boundary Protection Devices, and Systems passed the Common Criteria assessment process successfully.

In recent years, the number of issued certifications has increased by an average of 10%.

Data source: https://www.commoncriteriaportal.org/products/stats/
Data source: https://www.commoncriteriaportal.org/products/stats/

6. New Zealand became a certificate-consuming country

After many years of the close alliance between Australia and New Zealand in managing the Australasian Certification Authority, New Zealand has opted to give up its authorizing position and remain a certificate-consuming nation in the CCRA. This is to more accurately represent New Zealand’s contribution to the Australasian Information Security Evaluation Program (AISEP) and the CCRA. The AISEP program name has been modified from ‘Australasian’ to ‘Australian’ to better represent the program’s status as a certificate authorizing nation of the CCRA. These modifications took effect in October 2021.

7. EUCC is replacing the European SOGIS mutual recognition agreement

The EUCC cybersecurity system developed by ENISA (the European Union Agency for Cybersecurity) will take the place of the existing European SOGIS mutual recognition agreement (Senior Officers Group for Information Systems). EUCC is a Common Criteria-based certification system that combines the globally acknowledged, proven methodologies of Common Criteria with new concepts to give stakeholders a contemporary and flexible solution, such as patch management for certified systems and products.

The post 7 Interesting Facts About Common Criteria appeared first on Home Business Magazine.

Original source: https://homebusinessmag.com/businesses/security/7-interesting-facts-about-common-criteria/

352 thoughts on “7 Interesting Facts About Common Criteria”

  27. Hi, just required you to know I he added your site to my Google bookmarks due to your layout. But seriously, I believe your internet site has 1 in the freshest theme I??ve came across.Seo Paketi Skype: By_uMuT@KRaLBenim.Com -_- live:by_umut

  36. Hi, just required you to know I he added your site to my Google bookmarks due to your layout. But seriously, I believe your internet site has 1 in the freshest theme I??ve came across.Seo Paketi Skype: By_uMuT@KRaLBenim.Com -_- live:by_umut

  77. Hi, just required you to know I he added your site to my Google bookmarks due to your layout. But seriously, I believe your internet site has 1 in the freshest theme I??ve came across.Seo Paketi Skype: By_uMuT@KRaLBenim.Com -_- live:by_umut

  124. Hi, just required you to know I he added your site to my Google bookmarks due to your layout. But seriously, I believe your internet site has 1 in the freshest theme I??ve came across.Seo Paketi Skype: By_uMuT@KRaLBenim.Com -_- live:by_umut

  135. Hi, just required you to know I he added your site to my Google bookmarks due to your layout. But seriously, I believe your internet site has 1 in the freshest theme I??ve came across.Seo Paketi Skype: By_uMuT@KRaLBenim.Com -_- live:by_umut

  144. Hi, just required you to know I he added your site to my Google bookmarks due to your layout. But seriously, I believe your internet site has 1 in the freshest theme I??ve came across.Seo Paketi Skype: By_uMuT@KRaLBenim.Com -_- live:by_umut

  162. Hi, just required you to know I he added your site to my Google bookmarks due to your layout. But seriously, I believe your internet site has 1 in the freshest theme I??ve came across.Seo Paketi Skype: By_uMuT@KRaLBenim.Com -_- live:by_umut

  163. Hi, just required you to know I he added your site to my Google bookmarks due to your layout. But seriously, I believe your internet site has 1 in the freshest theme I??ve came across.Seo Paketi Skype: By_uMuT@KRaLBenim.Com -_- live:by_umut

  176. Hi, just required you to know I he added your site to my Google bookmarks due to your layout. But seriously, I believe your internet site has 1 in the freshest theme I??ve came across.Seo Paketi Skype: By_uMuT@KRaLBenim.Com -_- live:by_umut

  179. Hi, just required you to know I he added your site to my Google bookmarks due to your layout. But seriously, I believe your internet site has 1 in the freshest theme I??ve came across.Seo Paketi Skype: By_uMuT@KRaLBenim.Com -_- live:by_umut

  182. Hi, just required you to know I he added your site to my Google bookmarks due to your layout. But seriously, I believe your internet site has 1 in the freshest theme I??ve came across.Seo Paketi Skype: By_uMuT@KRaLBenim.Com -_- live:by_umut

  188. Hi, just required you to know I he added your site to my Google bookmarks due to your layout. But seriously, I believe your internet site has 1 in the freshest theme I??ve came across.Seo Paketi Skype: By_uMuT@KRaLBenim.Com -_- live:by_umut

  204. Hi, just required you to know I he added your site to my Google bookmarks due to your layout. But seriously, I believe your internet site has 1 in the freshest theme I??ve came across.Seo Paketi Skype: By_uMuT@KRaLBenim.Com -_- live:by_umut

  216. Hello! I could have sworn I’ve been to this blog before but after browsing through some of the post I realized it’s new to me.

  228. Hello! I could have sworn I’ve been to this blog before but after browsing through some of the post I realized it’s new to me.Onwin Giriş için Tıklayın onwin

  229. I really love to read such an excellent article. Helpful article. Hello Administ . Websiteye Giriş için Tıklayın. a href=”https://cutt.ly/SahabetSosyal/” title=”Sahabet” rel=”dofollow”>Sahabet

  233. Hi, just required you to know I he added your site to my Google bookmarks due to your layout. But seriously, I believe your internet site has 1 in the freshest theme I??ve came across.

  243. Hi, just required you to know I he added your site to my Google bookmarks due to your layout. But seriously, I believe your internet site has 1 in the freshest theme I??ve came across.

  245. Hi, just required you to know I he added your site to my Google bookmarks due to your layout. But seriously, I believe your internet site has 1 in the freshest theme I??ve came across. Casibom Website Giriş : Casibom

  249. Hi, just required you to know I he added your site to my Google bookmarks due to your layout. But seriously, I believe your internet site has 1 in the freshest theme I??ve came across.

  262. Hi, just required you to know I he added your site to my Google bookmarks due to your layout. But seriously, I believe your internet site has 1 in the freshest theme I??ve came across.

  265. Hi, just required you to know I he added your site to my Google bookmarks due to your layout. But seriously, I believe your internet site has 1 in the freshest theme I??ve came across.

  270. Hi, just required you to know I he added your site to my Google bookmarks due to your layout. But seriously, I believe your internet site has 1 in the freshest theme I??ve came across.

Comments are closed.