Information technology — Security techniques — Evaluation criteria for IT security — Part 2: Security functional components

Title		Information technology — Security techniques — Evaluation criteria for IT security — Part 2: Security functional components
Acronym		ISO/IEC 15408-2
Document Type		Standard
Committee		ISO/IEC JTC 1/SC 27 INFORMATION SECURITY, CYBERSECURITY AND PRIVACY PROTECTION
Published Year		2008
Link		https://www.iso.org/standard/46414.html
Abstract ISO/IEC 15408-2:2008 defines the content and presentation of the security functional requirements to be assessed in a security evaluation using ISO/IEC 15408. It contains a comprehensive catalogue of predefined security functional components that will meet most common security needs of the marketplace. These are organized using a hierarchical structure of classes, families and components, and supported by comprehensive user notes. ISO/IEC 15408-2:2008 also provides guidance on the specification of customized security requirements where no suitable predefined security functional components exist.