162k views
5 votes
Under the common criteria, which term describes the user-generated specifications for security requirements?

User Mederic
by
7.8k points

1 Answer

3 votes

The correct answer to this question is the:

“Protection Profile (PP)”

According to the ISO/IEC 15408 and the Common Criteria (CC), the Protection Profile (PP) is a document used as a part of the certification process. And since it is a generic form of a Security Target (ST), this makes it a typical creation by a user or a community of users.

User Bumbeishvili
by
7.7k points