Hi All,
ISO/IEC just published ISO/IEC 15408-3:2022 Information security, cybersecurity and privacy protection - Evaluation criteria for IT security - Part 3: Security assurance components
This document defines the assurance requirements of the ISO/IEC 15408 series. It includes the individual assurance components from which the evaluation assurance levels and other packages contained in ISO/IEC 15408-5 are composed, and the criteria for evaluation of Protection Profiles (PPs), PP-Configurations, PP-Modules, and Security Targets (STs).
This standard can be previewed here:
https://www.iso.org/obp/ui/#iso:std:iso-iec:15408:-3:ed-4:v1:enThis standard can be purchased here:
https://www.iso.org/standard/72906.html------------------------------
Michael Roza CPA, CISA, CIA, MBA, Exec MBA
------------------------------