evaluation baseline
Documentation that formally defines the security functions of a system or product against which its evaluation is performed [CESG].
Note: A System Electronic Information Security Policy forms the basis of the evaluation baseline for a system.