CGRC · Question #433
Governing document that provides a comprehensive, rigorous method for specifying security function and assurance requirements for products and systems. Response:
The correct answer is A. Common Criteria. The Common Criteria for Information Technology Security Evaluation (CC) is an international standard that provides a framework for specifying and evaluating security properties of IT products and systems. It offers a structured way to define security requirements and assurance le
Question
Governing document that provides a comprehensive, rigorous method for specifying security function and assurance requirements for products and systems. Response:
Options
- ACommon Criteria
- BEvaluation Criteria
- CConcrete Criteria
- DAbstract Criteria
How the community answered
(35 responses)- A89% (31)
- B3% (1)
- C6% (2)
- D3% (1)
Why each option
The Common Criteria for Information Technology Security Evaluation (CC) is an international standard that provides a framework for specifying and evaluating security properties of IT products and systems. It offers a structured way to define security requirements and assurance levels.
The Common Criteria (CC) is an internationally recognized standard (ISO/IEC 15408) for computer security certification, providing a common language and framework for specifying security functional requirements (SFRs) and security assurance requirements (SARs) for IT products and systems. It outlines a rigorous method for evaluating these security claims.
"Evaluation Criteria" is a generic term and not the specific name of the international standard that provides a rigorous method for specifying security requirements.
"Concrete Criteria" is not a recognized term or standard in IT security evaluation.
"Abstract Criteria" is not a recognized term or standard in IT security evaluation.
Concept tested: Common Criteria for IT Security Evaluation
Source: https://csrc.nist.gov/glossary/term/common-criteria-cc
Topics
Community Discussion
No community discussion yet for this question.