Information Security: Principles and Practices 2nd Edition by Jim Breithaupt, Mark S. Merkow

Exercise 12

Common Criteria (CC)

1. Describe the Common Criteria in terms of its purpose.

2. How does the CC differ from TCSEC and ITSEC?

Step 1 of 2

Common Criteria

1. The CC stands for Common Criteria for Information Security Evaluation. This is the joint effort between Canada, United States, and Europe. This began in 1993 to harmonize security evaluation criteria. This is done to align different international criteria into a single set of information technology security criteria. This criterion is designed for the broad use across the world.

The CC Editorial Board developed the earlier versions of CC. In 1999, the common criteria for IT security evaluation converted into ISO international standard. The common criteria are known as ISO 15408. CC combines all the best features of the ITSEC, TCSEC, and CTCPEC.