I.S. EN ISO/IEC 15408-3:2020&LC:2021
Current
The latest, up-to-date edition.
Information technology - Security techniques - Evaluation criteria for IT security - Part 3: Security assurance components (ISO/IEC 15408-3:2008, Corrected version 2011-05)
Hardcopy , PDF
English
11-05-2021
For Harmonized Standards, check the EU site to confirm that the Standard is cited in the Official Journal.
Only cited Standards give presumption of conformance to New Approach Directives/Regulations.
Dates of withdrawal of national standards are available from NSAI.
Important note : Users cannot be edited or removed once added to your Multi user PDF.
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions, symbols and abbreviated terms
4 Overview
5 Assurance paradigm
6 Security assurance components
7 Evaluation assurance levels
8 Composed assurance packages
9 Class APE: Protection Profile evaluation
10 Class ASE: Security Target evaluation
11 Class ADV: Development
12 Class AGD: Guidance documents
13 Class ALC: Life-cycle support
14 Class ATE: Tests
15 Class AVA: Vulnerability assessment
16 Class ACO: Composition
Annex A (informative) Development (ADV)
Annex B (informative) Composition (ACO)
Annex C (informative) Cross reference of assurance component dependencies
Annex D (informative) Cross reference of PPs and assurance components
Annex E (informative) Cross reference of EALs and assurance components
Annex F (informative) Cross reference of CAPs and assurance components
This part of ISO/IEC 15408 defines the assurance requirements of ISO/IEC 15408.
| Committee |
ISO/IEC JTC 1
|
| DocumentType |
Standard
|
| Pages |
200
|
| ProductNote |
The date of any NSAIprevious adoption may not matchthe date of its original CEN/CENELEC document.
|
| PublisherName |
National Standards Authority of Ireland
|
| Status |
Current
|
| Supersedes |
| Standards | Relationship |
| ISO/IEC 15408-3:2008 | Identical |
| EN ISO/IEC 15408-3:2020 | Identical |
Access your standards online with a subscription
Features
-
Simple online access to standards, technical information and regulations.
-
Critical updates of standards and customisable alerts and notifications.
-
Multi-user online standards collection: secure, flexible and cost effective.