Common Criteria – Evaluation Assurance Level by Wentz Wu, ISSAP, ISSEP, ISSMP CISSP, CCSP, CSSLP, CGRC, SSCP, CC, CISM, CISA, CRISC, CGEIT, PMP, ACP, PBA, RMP, CEH, ECSAWentz Wu

The Target of Evaluation (TOE) under the Common Criteria provides a different level of assurance. The most crucial factor is whether it is engineered based on a design.
If a TOE is lack of design, its EAL will be under 3, while a TOE with a design will be methodically reviewed.
The EAL of a TOE with a design depends on the condition that it is semi-formally or formally designed. Formal design is usually based on a mathematical model.

1 thought on “Common Criteria – Evaluation Assurance Level”

Wentz Wu