This Technical Report provides guidance and criteria for the security evaluation of operational systems. It provides an extension to the scope of ISO/IEC 15408, by taking into account a number of critical aspects of operational systems not addressed in ISO/IEC 15408 evaluation. The principal extensions that are required address evaluation of the operational environment surrounding the target of evaluation, and the decomposition of complex operational systems into security domains that can be separately evaluated. This Technical Report providesa) a definition and model for operational systems,b) a description of the extensions to ISO/IEC 15408 evaluation con
DS/ISO/IEC TR 19791:2010 history
2010DS/ISO/IEC TR 19791:2010 Information technology - Security techniques - Security assessment of operational systems