3-21.1

Question 1

What is security evaluation?

Answer 1

Tto assess product functionality (security control exists and works) and assurance (degree of confidence it will act correctly/predictably) in a consistent and repeatable manner.

Question 2

What is the Common Criteria?

Answer 2

Primary objective of the common criteria is to establish criteria for evaluating and certifying the security properties of hardware, software, and firmware. Independent labs used the Common Criteria to evaluate products as their protection profile.

Question 3

What is a protection profile?

Answer 3

A protection profile defines sets of security requirements for specific types of products or systems. It can be written by several different groups, including vendors, customers, and accreditation agencies. Vendors can then claim compliance with the protection profile when their products meet the requirements.

Question 4

What are Common Criteria EALs?

Answer 4

Evaluation Assurance Levels. (1-7).