Specifies the required structure and content of security functional components for the purpose of security evaluation. It also includes a catalogue of functional components that will meet the common security functionality requirements of many IT products.