Iso Iec 15408 Pdf Link Here
) can be purchased directly from the ISO Store or through national standards bodies like ANSI .
Defines the concepts, terms, and the evaluation methodology.
| Level | Name | Description | Best For | | :--- | :--- | :--- | :--- | | | Functionally Tested | Basic review of security functions. | Low-value assets, legacy systems. | | EAL2 | Structurally Tested | Requires design information and testing. | Commercial off-the-shelf (COTS) products. | | EAL3 | Methodically Tested & Checked | Development environment controls. | Moderate risk environments. | | EAL4 | Methodically Designed, Tested, & Reviewed | The most common level. Requires formal design and vulnerability analysis. High-value commercial products. | | | EAL5 | Semi-formally Designed & Tested | Rigorous engineering methods. | Military/comms systems in high-risk scenarios. | | EAL6 | Semi-formally Verified Design & Tested | Structured design, covert channel analysis. | Extreme risk (defense, aerospace). | | EAL7 | Formally Verified Design & Tested | Mathematical proofs of security. | Nuclear command & control, top-secret crypto. | iso iec 15408 pdf
Defines the assurance requirements (SARs) that must be met to prove the security claim is valid (e.g., testing, code review).
– Defines terms, abbreviations, and basic security concepts like the Target of Evaluation (TOE) . ) can be purchased directly from the ISO
A single evaluation unlocks sales opportunities across all CCRA member nations, including lucrative government, defense, and financial sectors.
Pre-defined templates for evaluating products. Key Concepts in ISO/IEC 15408 | Low-value assets, legacy systems
Would you like a practical summary of the key sections, or a guide on how to read this standard for a specific product evaluation?
Independent validation confirms that critical security features (like encryption or access controls) operate as intended.
Because ISO/IEC 15408 is a dual-branded standard developed by both the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC), official copies can be purchased directly via the or IEC Webstore .