312-50V10 · Question #269
What is the name of the international standard that establishes a baseline level of confidence in the security functionality of IT products by providing a set of requirements for evaluation?
The correct answer is C. Common Criteria. Common Criteria (ISO/IEC 15408) is the international standard providing a framework of requirements for evaluating and certifying the security functionality of IT products.
Question
What is the name of the international standard that establishes a baseline level of confidence in the security functionality of IT products by providing a set of requirements for evaluation?
Options
- ABlue Book
- BISO 26029
- CCommon Criteria
- DThe Wassenaar Agreement
How the community answered
(61 responses)- A5% (3)
- B2% (1)
- C87% (53)
- D7% (4)
Why each option
Common Criteria (ISO/IEC 15408) is the international standard providing a framework of requirements for evaluating and certifying the security functionality of IT products.
The 'Blue Book' is an informal reference to various DoD or telecommunications documents and is not an international IT security product evaluation standard.
ISO 26029 does not correspond to an IT security evaluation standard - the correct ISO designation for Common Criteria is ISO/IEC 15408.
Common Criteria defines internationally recognized requirements - including Protection Profiles and Evaluation Assurance Levels (EALs) - that establish a baseline of confidence in an IT product's security claims. It is formalized as ISO/IEC 15408 and is mutually recognized by member governments, making it the definitive standard for IT security product evaluation globally.
The Wassenaar Arrangement is a multilateral export control regime governing conventional weapons and dual-use goods, not a framework for evaluating IT product security functionality.
Concept tested: Common Criteria IT security evaluation standard
Source: https://www.commoncriteriaportal.org/cc/
Topics
Community Discussion
No community discussion yet for this question.