312-50V11 · Question #269
What is the name of the international standard that establishes a baseline level of confidence in the security functionality of IT products by providing a set of requirements for evaluation?
The correct answer is C. Common Criteria. Common Criteria (ISO/IEC 15408) is the internationally recognized standard for evaluating and certifying the security properties of IT products.
Question
What is the name of the international standard that establishes a baseline level of confidence in the security functionality of IT products by providing a set of requirements for evaluation?
Options
- ABlue Book
- BISO 26029
- CCommon Criteria
- DThe Wassenaar Agreement
How the community answered
(23 responses)- A4% (1)
- C91% (21)
- D4% (1)
Why each option
Common Criteria (ISO/IEC 15408) is the internationally recognized standard for evaluating and certifying the security properties of IT products.
The 'Blue Book' refers to the older U.S. DoD Trusted Computer System Evaluation Criteria (TCSEC), which was a U.S.-only standard superseded by Common Criteria.
ISO 26029 does not correspond to an IT security product evaluation standard; it is not a recognized identifier in this domain.
Common Criteria (formally ISO/IEC 15408) is the international standard that defines a framework of security requirements known as Protection Profiles and Security Targets. It provides assurance levels (EAL1-EAL7) that establish increasing degrees of confidence in a product's security functionality. Evaluation against Common Criteria is recognized by governments and organizations worldwide through the Common Criteria Recognition Arrangement (CCRA).
The Wassenaar Arrangement is a multilateral export control regime governing dual-use goods and technologies, not a security evaluation framework for IT products.
Concept tested: Common Criteria IT security evaluation standard
Source: https://csrc.nist.gov/projects/common-criteria
Topics
Community Discussion
No community discussion yet for this question.