European Telecommunications Standards Institute

Abbreviation for end-of-text character.

End-system Unique Identifier

1. Assessment of an information technology (IT) product or system against defined security-related functional and assurance criteria, performed by a combination of testing and analytic techniques.
2. The detailed examination of a system or a product to search for vulnerabilities and to determine the extent to which the required or claimed security functions are upheld by its implementation [CESG].
Note:… (Read More →)

One of seven increasingly rigorous packages of assurance requirements from CC (Common Criteria) Part
3.
Note: Each numbered package represents a point on the CC's predefined assurance scale. An EAL can be considered a level of confidence in the security functions of an IT (information-technology) product or system. [After CC'99]

Documentation that formally defines the security functions of a system or product against which its evaluation is performed [CESG].
Note: A System Electronic Information Security Policy forms the basis of the evaluation baseline for a system.

Report issued by a CLEF to report any problem, other than those already covered by an SFN, relating to the Target of Evaluation (TOE). Initial distribution should be to the UK Certification Body [CESG]. See also: Security Fault Notification.

An organization working directly for CESG whose purpose is to perform evaluations [CESG].

1. Member of an Evaluation Facility assigned to a particular evaluation [CESG].
2. The independent person or organization that performs an evaluation [ITSEC].

A component of the evaluation criteria for a particular phase or aspect of evaluation, identifying what the evaluator must do to check the information supplied by the sponsor of the evaluator, and the additional activities he must perform [ITSEC].