Concepts, lifecycle, evaluation flow and key deliverables for product teams new to CC.
format
Training
Duration
1 day
Audience
Product & security teams
Objective
Give product and security teams a working understanding of the Common Criteria framework, so they can approach a certification project with confidence.
Programme & agenda
01
Origins and structure of ISO/IEC 15408, and the EAL scale
02
Key actors: sponsor, developer, evaluator, certification body
03
Security Target vs Protection Profile
04
Evaluation cycle: overview of ASE, ADV, AGD, ALC, ATE, AVA classes
05
Typical timeline and deliverables
06
Q&A anchored on the participants’ own products
Prerequisites
None — designed as an entry point for teams discovering CC