ISO/IEC 15408-1-ed.5.0

Annotation of standard text ISO/IEC 15408-1-ed.5.0 :

This document establishes the general concepts and principles of information technology (IT) security evaluation. It specifies the general model of evaluation given in this document, which in its entirety is intended to be used as the basis for evaluation of security properties of IT products.

This document provides an overview of all parts of the ISO/IEC 15408 series. It describes the various parts of the ISO/IEC 15408 series i.e.

• defines the terms and abbreviations used in all parts of the series; establishes the core concept of a Target of Evaluation (TOE);
• describes the evaluation context; and
• describes the audience to which the evaluation criteria is addressed.

Additionally, this document introduces the basic security concepts necessary for the evaluation of IT products.

Le present document etablit les concepts et principes generaux de levaluation de la securite des technologies de linformation (TI). Il specifie le modele general devaluation donne dans le present document, qui, dans son integralite, est destine a servir de base a levaluation des proprietes de securite des produits TI.

Le present document fournit une vue densemble de toutes les parties de la serie ISO/IEC 15408. Il decrit les differentes parties de la serie ISO/IEC 15408 cest-a-dire quil:

• definit les termes et abreviations utilises dans toutes les parties de la serie; etablit le concept de base dune cible devaluation (TOE, de langlais Target of Evaluation);
• decrit le contexte devaluation; et
• decrit le public auquel les criteres devaluation sont adresses.

De plus, le present document introduit les concepts de securite de base necessaires a levaluation des produits TI.