But don't take any certification as gospel. Certifications are good at capturing a common set of requirements, but you'll still have your own unique ones.
Mike Fratto is a senior technology editor based in Network Computing's Syracuse University Real-World Labs®; he covers all security-related topics. Write to him at [email protected].
Post a comment or question on this story.
Certification Report: Summary of the Common Criteria testing results
EAL (Evaluation Assurance Level): A rating
given to products that meet a minimum set of CC requirements defined for a specific level
PP (Protection Profile): This document defines the required security functions for a set of security needs. CC-certified PPs are evaluated just as thoroughly as STs and TOEs. You can define your own PP using the Common Criteria Part 2 document.
To realize the benefits of cloud-native software, an application must actually be cloud-native—designed to run in the cloud, interacting with disaggregated cloud services, fully manageable as code—to deliver the expected benefits.
By combining resources and expertise, the AI-Enabled ICT Workforce Consortium will offer a blueprint for how industries can adapt to an AI-dominated future.
IT leaders should heed the guidance of cybersecurity insurance providers who think businesses should prioritize security education, incident preparedness, regular internal audits, and ongoing vulnerability scanning and patching.
