|
|
In 1985, the UK Government's Communications Electronics Security Group
(CESG), as the technical authority for HMG electronic security, established
evaluation facilities for carrying out security evaluations of government
computer systems. These facilities were the forerunners of today's
CommerciaL Evaluation
Facilities (CLEFs).
In 1987, the UK Department of Trade and Industry (DTI) established
the Commercial Computer Security Centre to examine the application
of formal security evaluation to commercially available IT products.
This resulted in the publication of a set of evaluation criteria and
an outline scheme for their operational use known as "the Green
Books". These criteria were tested during 1989 and underwent
wide consultation with industry.
It was realised that greater benefits would be gained from a single
scheme and accordingly, in December 1989, a new joint CESG/DTI scheme
was announced - the UK IT Security Evaluation and Certification scheme,
usually abbreviated to the "UK ITSEC scheme". The Scheme
commenced on 4 July 1990 and became fully operational on 1 May 1991.
Mission Statement
The objectives of the Scheme are to meet the needs of Industry and
Government for cost effective and efficient security evaluation and
certification of IT products and systems. The Scheme also aims to
provide a framework for the international mutual recognition of certificates.
|