Informační bezpečnost, kybernetická bezpečnost a ochrana soukromí - Kritéria pro hodnocení bezpečnosti IT - Část 4: Rámec pro specifikaci metod a činnosti hodnocení (Norma k přímému použití jako ČSN).
NORMA vydána dne 1.5.2024
Designation standards: ČSN EN ISO/IEC 15408-4
Classification mark: 369789
Catalog number: 518894
Publication date standards: 1.5.2024
The number of pages: 32
Approximate weight : 96 g (0.21 lbs)
Country: Czech technical standard
Kategorie: Technické normy ČSN
ISO/IEC 15408 series permits comparability between the results of independent security evaluations. The ISO/IEC 15408 series does so by providing a common set of requirements for the security functionality of IT products and for assurance measures applied to these IT products during a security evaluation. ISO/IEC 18045 provides a companion methodology for some of the assurance requirements specified in the ISO/IEC 15408 series, ISO/IEC 15408-1 and ISO/IEC 18045 also allow that more specific Evaluation Activities (EAs) may be derived for use in particular evaluation contexts. Specification of such Evaluation Activities is already occurring amongst practitioners and this creates a need for a specification for defining such Evaluation Activities.
This document, ISO/IEC 15408-4, provides a standardised framework for specifying objective, repeatable and reproducible Evaluation Methods (EMs), and Evaluation Activities