SIST EN ISO/IEC 15408-3:2024 PDF

Name: SIST EN ISO/IEC 15408-3:2024 — Information security, cybersecurity and privacy protection - Evaluation criteria for IT security - Part 3: Security assurance components (ISO/IEC 15408-3:2022)
SKU: SIST EN ISO/IEC 15408-3:2024
Price: 195.31 EUR
Availability: InStock

Information security, cybersecurity and privacy protection - Evaluation criteria for IT security - Part 3: Security assurance components (ISO/IEC 15408-3:2022)

Название (английский):

SIST EN ISO/IEC 15408-3:2024

Information security, cybersecurity and privacy protection - Evaluation criteria for IT security - Part 3: Security assurance components (ISO/IEC 15408-3:2022)

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 204
Дата публикации:: 12 апреля 2024 г.
Издание:: (ISO/IEC 15408-3:2022)
ICS:: 35.030

Тип поставки:

Full version3 060 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:34 раб. дн. (перевод)

Цена:3 060 €

Описание (английский):

This document defines the assurance requirements of the ISO/IEC 15408 series. It includes the individual assurance components from which the evaluation assurance levels and other packages contained in ISO/IEC 15408-5 are composed, and the criteria for evaluation of Protection Profiles (PPs), PP-Configurations, PP-Modules, and Security Targets (STs).

Abstract

Похожие стандарты

Упомянутые в описании и другие стандарты SIST

Overview

EN ISO/IEC 15408-3:2023 (aligned with ISO/IEC 15408-3:2022) is the Part 3 specification of the ISO/IEC 15408 series-commonly known as the Common Criteria. This European adoption by CEN defines the security assurance components used to build evaluation assurance levels (EALs) and assurance packages. It establishes the assurance requirements and the criteria for evaluating Protection Profiles (PPs), PP‑Configurations, PP‑Modules and Security Targets (STs).

Key topics and technical requirements

Assurance paradigm and evaluation scale: Describes the assurance approach, significance and causes of vulnerabilities, and the ISO/IEC 15408 evaluation assurance scale used to express confidence in security functions.

Assurance class, family and component structure: Defines how assurance classes are organized into families and individual components, including naming, introductions and objectives.

Component levelling and dependencies: Components are leveled (to indicate strength/rigor) and include explicit dependencies and application notes to guide evaluation scope.

Assurance elements: Breaks components down into measurable elements (work units for evaluators) used during evaluation.

Protection Profile and Security Target evaluation: Contains specific classes (e.g., APE - PP evaluation, ACE - PP‑Module/Configuration evaluation) and components such as APE_INT, APE_CCL, APE_SPD, APE_OBJ, APE_REQ for documenting PP/ST introductions, conformance claims, problem definitions, objectives and requirements.

Taxonomy and application guidance: Provides a standardized taxonomy and guidance to ensure consistent interpretation across evaluations and national schemes.

Practical applications and users

Evaluation laboratories and certification bodies use this document to structure and perform conformity assessments against Protection Profiles and Security Targets.

Product vendors and developers rely on the assurance components to prepare Security Targets and evidence packages that meet required assurance levels.

Security architects and system integrators consult it to design systems whose security claims can be evaluated and certified.

Procurement teams and regulators reference the standard when specifying required assurance levels or accepting certified IT products for sensitive environments.

Related standards

ISO/IEC 15408 (Common Criteria) - the series within which Part 3 sits.

EN ISO/IEC 15408-5 - defines evaluation assurance levels and packages composed from the components in Part 3.

Keywords: EN ISO/IEC 15408-3:2023, ISO/IEC 15408-3:2022, Common Criteria, security assurance components, Protection Profile evaluation, Security Target, evaluation assurance levels, IT security assurance, cybersecurity standard.

SIST EN ISO/IEC 15408-3:2024 PDF

Abstract

Похожие стандарты

Overview

Key topics and technical requirements

Practical applications and users

Related standards

Технические детали

SIST EN ISO/IEC 19896-3:2026

Information security, cybersecurity and privacy protection - Requirements for the competence of IT security c…

BS EN ISO/IEC 15408-5:2026-TC

Tracked Changes. Information security, cybersecurity and privacy protection. Evaluation criteria for IT secur…

SIST EN ISO 6338:2026

Method to calculate GHG emissions at LNG plant (ISO 6338:2023)

SIST-TP CEN ISO/ASTM TR 52958:2026

Additive manufacturing of metals - Powder bed fusion (PBF) - In-situ coaxial photodiode monitoring for lack o…

SIST EN ISO 41002:2026

Facility management - Development of the facility management organization (ISO 41002:2026)

SIST EN ISO 844:2026

Rigid cellular plastics - Determination of compressive properties (ISO 844:2026)

SIST-TS CEN ISO/TS 17664-3:2026

Processing of health care products - Information to be provided by the medical device manufacturer for the pr…

SIST EN ISO 8980-4:2026

Ophthalmic optics - Uncut finished spectacle lenses - Part 4: Specifications and test methods for the propert…