INCITS/ISO/IEC 15408-3 : 2013(R2018)
Superseded
A superseded Standard is one, which is fully replaced by another Standard, which is a new edition of the same Standard.
View Superseded by
INFORMATION TECHNOLOGY - SECURITY TECHNIQUES - EVALUATION CRITERIA FOR IT SECURITY - PART 3: SECURITY ASSURANCE REQUIREMENTS
Hardcopy , PDF
27-12-2023
English
01-01-2013
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions, symbols and abbreviated terms
4 Overview
5 Assurance paradigm
6 Security assurance components
7 Evaluation assurance levels
8 Composed assurance packages
9 Class APE: Protection Profile evaluation
10 Class ASE: Security Target evaluation
11 Class ADV: Development
12 Class AGD: Guidance documents
13 Class ALC: Life-cycle support
14 Class ATE: Tests
15 Class AVA: Vulnerability assessment
16 Class ACO: Composition
Annex A (informative) - Development (ADV)
Annex B (informative) - Composition (ACO)
Annex C (informative) - Cross reference of assurance
component dependencies
Annex D (informative) - Cross reference of PPs and assurance
components
Annex E (informative) - Cross reference of EALs and assurance
components
Annex F (informative) - Cross reference of CAPs and assurance
components
Delineates the assurance requirements of the standard. It includes the evaluation assurance levels (EALs) that define a scale for measuring assurance, the individual assurance components from which the assurance levels are composed, and the criteria for evaluation of PPs and STs.
Committee |
CS1
|
DocumentType |
Revision
|
Pages |
188
|
PublisherName |
Information Technology Industry Council
|
Status |
Superseded
|
SupersededBy | |
Supersedes |
Standards | Relationship |
ISO/IEC 15408-3:2008 | Identical |
ISO/IEC 15408-2:2008 | Information technology — Security techniques — Evaluation criteria for IT security — Part 2: Security functional components |
ISO/IEC 15408-1:2009 | Information technology — Security techniques — Evaluation criteria for IT security — Part 1: Introduction and general model |
Access your standards online with a subscription
Features
-
Simple online access to standards, technical information and regulations.
-
Critical updates of standards and customisable alerts and notifications.
-
Multi-user online standards collection: secure, flexible and cost effective.