Skip to main content
  • General publications

Composite product evaluation and certification for CC:2022

The objective of this document is to address composite certification aspects that are relevant for scheme harmonisation, but are not or only partly covered by the Common Criteria.

Details

Publication date
20 March 2025
Author
European Union Agency for Cybersecurity
Type of Documents
  • State-of-the-art Documents
Certification Schemes
Certification Stakeholders
  • CAB

Description

The composite evaluation approach as described in (CC) part 1, section 14.3.3 can be applied in principle to any secure IT product where an independently evaluated component is part of a final composite product to be evaluated. The composite evaluation approach addresses in particular TOEs that are of the type belonging to the technical domain “Smart Cards and similar devices”. However, the composite evaluation approach is not restricted to smart cards and similar devices only. In this sense the present document is in the same way intended for composite COMPOSITE PRODUCT EVALUATION AND CERTIFICATION FOR CC 2022 VERSION 1 - FEBRUARY 2025 5 certification aspects regards the general composite evaluation approach addressed in (CC) and (CEM). Where applicable, specific aspects for smart cards and similar devices are considered in the following sections.

Files

  • 20 MARCH 2025
Composite product evaluation and certification for CC: 2022 - v1