Compare EAL-based and protection profile evaluations, and understand which approach may suit your product.
Published
Last reviewed
|
EAL-based and protection profile evaluations
AISEP supports two common criteria evaluation approaches.
EAL-based evaluation
An Evaluation Assurance Level (EAL)-based evaluation assesses a product against a vendor-defined security target using a selected assurance package.
This is useful when an applicable mandatory protection profile does not exist.
It allows the security target to describe product-specific security functions and the claimed EAL.
The evaluation scope and assurance activities are determined by the selected EAL and any additional assurance requirements.
Protection profile evaluation
A protection profile evaluation assesses a product against standardised security requirements and evaluation activities defined for a product category.
This supports greater consistency and comparability across products in the same category.
Uses requirements and assurance activities established by the applicable protection profile.
May be required where an endorsed protection profile applies to the product type.
Which evaluation type applies?
Begin by checking whether an applicable protection profile exists for the product category. A licensed AISEF can help determine the appropriate pathway, scope and evidence requirements before an evaluation begins.
Prior to accepting an evaluation into AISEP, the Australian Certification Authority will work with the vendor to ensure the proposed evaluation scope is adequate.
