System Security Certification and Accreditation -
In an IT security networking meeting, you join a group discussion the Common Criteria. Now you're going to have to move up to the Common Criteria. You will need to focus on the Protection Profile (PP). A Protection Profile contains the necessary security requirements to achieve the operational functionality and assurance for a generic product or system of the designated category.
You're in front of your CIO and she is not pleased that you have changed direction. You have explained the fundamentals to her, and now she is asking more detailed questions. This week you will respond to questions from your CIO.
Finally, you will further refine the Case Study Report to produce the Final Key Assignment. Updates may be based on peer and instructor feedback.( Will be provided separately)
The project deliverables are:
- Update the Case Study Report title page with new date and project name.
- Update previously completed sections based on instructor feedback.
- The EAL ratings in the Common Criteria:
What is the value of the Evaluation Assurance Level ( EAL) rating in the CC model?
There is a treaty that requires the signatory nations to accept CC evaluations of products (U.S. and most European countries) from one country to another up to EAL4. Why is EAL4 a breakpoint?