Common Criteria is the internationally accepted replacement for the outmoded United States Department of Defense Orange Book security evaluations. Government agencies around the world as well as many other organizations require Common Criteria evaluation as part of their product selection process.
Common Criteria allows product vendors to describe the security functions they offer in a standard manner, and allows customers to describe the security functions they require. Common Criteria makes it possible to map these two sets of features to a meaningful suite of products.
The hardware must be located in a secure physical environment and users of all types should not reveal keys or passwords. Additionally, they should not allow written records or notes to be seen by unauthorized personnel.
For more information about Common Criteria, see http://www.commoncriteriaportal.org. This chapter contains information about the following topics: