1. Common Criteria assessment and certification

1.1 Legal basis of the Common Criteria

The first attempt to coordinate the evaluation of ISS products dates back to 1999. The European Mutual Recognition Agreement of the Senior Officers Group for Information Systems Security (SOG-IS), also known as the European Cryptography Experts Group, enables mutual recognition of security certificates issued by one of the national certification authorities signing the agreement.

Under the terms of this agreement, Information Technology Security Evaluation (ITSEC) level E6 and CC EAL7 certificates (§ 1.3