The purpose
of this Arrangement is to bring about a situation in which IT
products and protection profiles which earn a Common Criteria
certificate can be procured or used without the need for further
evaluation.
437k
[MRA]
Mutual Recognition Agreement of Information Technology Security
Evaluation Certificates
This document
is Version 3.0 dated January 2010 and it supersedes the document
“Mutual Recognition Agreement of Information Technology
Security Evaluation Certificates – Version 2.0”
dated April 1999 that superseded the document 017/97 Final approved
by Senior Officials Group Information Systems Security (SOG-IS)
of the European Commission at their meeting on 26 November 1997
in response to point 3 of Council Recommendation 95/144/EC of
7 April 1995.
234k
[UKSP00]
Abbreviations and References
Provides a list of References
& Abbreviations that may be found within Scheme Documentation
58k
[UKSP01]
Description of the scheme
Provides a complete overall
description of the UK Scheme
79k
[UKSP02 Part I]
CLEF Requirements Part I - Start Up and Operation - Issue 4.3,
October 2010
Covers, in
detail, the appointment and operation of CLEFs for the UK Scheme.
Includes the following headings: Setting up a CLEF; Appointment
& Assessment for New CLEFs and CLEF operation.
238k
[UKSP02 Part II]
CLEF Requirements Part II - Conduct of an Evaluation
Covers CLEF organization,
preparation, conduct and conclusion phases of an evaluation.
88k
[UKSP03 Part I]
Sponsor's Guide - General Introduction
Covers a broad spectrum
of issues concerning the Sponsor and the UK Scheme. Subjects
include: Features and Benefits of the Scheme; Concepts of Security
Evaluation; Roles and Responsibilities of Sponsors; Evaluation
Preparation & Timescales and Project Management Issues.
Some aspects also affect Developers.
388k
[UKSP03 Part II]
Sponsor's Guide - Assurance Continuity
Sets out the requirements
for Assurance Continuity under the Scheme.
330k
SIN 091 - Impact of UKSP changes
and consolidation of SINs affecting UKSP16
Scheme Information Notice
091 describes the impact of UKSP changes and consolidation of
SINs affecting UKSP16.
125k
SIN 092 - Vulnerability-Centric
Evaluation: Improving Evaluations by Putting Vulnerabilities
First
Describes a 'Vulnerability-centric
approach' to CC evaluation, driven by vulnerability analysis
and penetration testing. The structure of evaluation is changed,
but the content of evaluation still covers all of the CEM evaluator
action elements.
194k
[CWP]
Standard Certification Work Programme
This CWP outlines the
certification work to be performed by the Certification Body
[CB].
40k
[CWP-AM]
Standard Certification Work Programme for Assurance Maintenance
This CWP-AM outlines the
certification work to be performed by the CB for Assurance Maintenance.
164k
[TSM-SA]
TSM Standard Agenda
The Standard Task Start-up
Meeting Agenda and guidance for attendees
164k
[TSM-TA]
TSM Template Agenda
The Standard TSM Agenda
that can be tailored to address more complex Task Start-up Reviews
201k
[EPM-SA]
EPM Standard Agenda
The Standard Evaluation
Progress Meeting (EPM) Agenda and guidance for attendees.
34k
[EPM-TA]
EPM Template Agenda
The Standard EPM Agenda
that can be tailored to address specific evaluation issues.
This CESG
Website is maintained for your personal use and viewing. Access and use
by you of this site constitutes acceptance of our terms and conditions which
take effect from the date of first use. Click
here for our terms and conditions