NIAP: NIAP Interpretations
NIAP/CCEVS
  NIAP  »»  CCEVS Big Picture  »»  NIAP Interpretations  
NIAP Interpretations

Interpretations and Evolution of the Criteria and Methodology
While the Common Criteria is intended to be coherent, concise, and unambiguous, it is still in need of clarification. At an international level, the Common Criteria Management Board (CCMB) is tasked with issuing updates, explanations, and errata concerning the Common Criteria and Methodology. The CCRA acknowledges that individual schemes may also provide their own interpretations, the intent being that these national interpretations are also shared at the international level. To this end, the NIAP has procedures in place to help resolve questions that arise concerning the criteria, methodology, or procedures as they relate to the NIAP.

Technical Rapid Response Teams (TRRT)

The TRRT process provides timely response to evaluation and protection profile (PP) technical issues raised throughout the course of an evaluation. NIAP assigns individuals from the validation community to TRRTs for each technology type. The goal of the TRRT is to respond to technical issues within two business days and provide an issue resolution statement. TRRT resolutions are final for that one particular evaluation only.

Should an issue pertain to multiple evaluations and/or Protection Profiles (PPs), the TRRT will publicly issue a decision on the NIAP website. Previously 'Precedent Decisions,' Technical Decisions (TDs) offer clarification and interpretations of PP requirements and assurance activities.

Evaluation Consistency Review (ECR)

At the end of each evaluation, an ECR is held. The ECR team is comprised of members of the validation community and their purpose is twofold. Foremost, to ensure the long-term technical consistency of the evaluation and validation processes. Second, to to ensure the CCTL has adequately evaluated the product with particular focus on the proper execution of the assurance activities defined in the PP. Should the ECR team recognize the need for a PP update/clarification, the suggestion will be forwarded to the TRRT for resolution.

More detailed information related to TRRTs and ECRs can be found in Annex D, Scheme Publication #3.

Site Map              Contact Us              Home