Тезис

ISO/IEC 15408-1:2005 defines two forms for expressing IT security functional and assurance requirements. The protection profile (PP) construct allows creation of generalized reusable sets of these security requirements. The PP can be used by prospective consumers for specification and identification of products with IT security features which will meet their needs. The security target (ST) expresses the security requirements and specifies the security functions for a particular product or system to be evaluated, called the target of evaluation (TOE). The ST is used by evaluators as the basis for evaluations conducted in accordance with ISO/IEC 15408.


Общая информация 

  • Текущий статус
     : Отозвано
    Дата публикации
     : 2005-10
  • Версия
     : 2
  • Технический комитет
     : ISO/IEC JTC 1/SC 27 Information security, cybersecurity and privacy protection
  • ICS
     :
    35.030 IT Security

Жизненный цикл

Появились вопросы?

Ознакомьтесь с FAQ

Работа с клиентами
+41 22 749 08 88

Часы работы:
Понедельник – пятница: 09:00-12:00, 14:00-17:00 (UTC+1)

  2. Интернет-магазин
  3. Каталог стандартов
  4. ТК
  5. ISO/IEC JTC 1/SC 27
  6. ISO/IEC 15408-1:2005