Skip to content

Scam messages have been sent in the name of Cyber Security Finland.

Common Criteria

Achieve Common Criteria certification and strengthen your organization's security reliability. We help organizations achieve international cybersecurity standards.

What is Common Criteria?

Common Criteria is an international standard for evaluating security products and systems. It provides a common framework for security evaluation and certification.

Common Criteria Components

Common Criteria is based on four main components that define security evaluation.

Security Objectives

Define security objectives and requirements

  • Security objectives
  • Security requirements
  • Threat models

Security Measures

Implement security measures and mechanisms

  • Security mechanisms
  • Security policies
  • Security protocols

Security Testing

Conduct comprehensive security testing

  • Penetration testing
  • Vulnerability testing
  • Security analysis

Security Documentation

Create comprehensive security documentation

  • Security guides
  • Security policies
  • Security processes

Evaluation Levels

Common Criteria defines seven evaluation levels (EAL1-EAL7) to determine security assurance.

EAL1

Basic Testing

Basic security testing and documentation

  • Basic testing
  • Documentation
  • Overview

EAL2

Substantial Testing

Substantial security testing and analysis

  • Substantial testing
  • Security analysis
  • Documentation

EAL3

High Testing

High level security testing and analysis

  • High level testing
  • Security analysis
  • Documentation

EAL4

Substantial Design

Substantial design and testing

  • Substantial design
  • High level testing
  • Documentation

EAL5

High Design

High level design and testing

  • High level design
  • High level testing
  • Documentation

EAL6

Substantial Assurance

Substantial assurance and testing

  • Substantial assurance
  • High level testing
  • Documentation

EAL7

High Assurance

High level assurance and testing

  • High level assurance
  • High level testing
  • Documentation

Implementation Process

Clear and structured process for Common Criteria certification.

1

Common Criteria Assessment

Assess current security posture against Common Criteria requirements

2

Gap Analysis

Identify gaps and plan remediation measures

3

Planning

Plan Common Criteria certification program

4

Implementation

Implement required security measures

5

Certification

Pass Common Criteria certification

Common Criteria Certification Benefits

Achieve concrete benefits with Common Criteria certification.

Meet international cybersecurity standards

Strengthen security reliability

Improve customer trust

Competitive advantage in markets

Global recognition

Ready to start your Common Criteria certification?

Contact us and let's start your Common Criteria certification process.