IT managers use the standard to compare different products objectively. If Product A is certified to EAL4 and Product B has no certification, Product A offers a verifiable level of trust that Product B lacks. How to Obtain ISO/IEC 15408
This is the "menu" of security features. It lists hundreds of individual functional requirements, such as: How the system logs events. Cryptographic Support: How data is encrypted. User Data Protection: How access controls are enforced. iso iec 15408 pdf
ISO/IEC 15408 is an international standard for IT security evaluation. It provides a structured framework where: can specify their security requirements. IT managers use the standard to compare different
(independent labs) can test those claims to see if the product actually meets the requirements. ISO/IEC 15408 is an international standard for IT
A numerical rating (1-7) reflecting the depth and rigor of the evaluation. A higher EAL does not necessarily mean a "better" product, but rather a more "thoroughly tested" one. Why Search for the PDF?