Evaluation criteria for it security

Abstract

After an Introduction which gives an outline of the paper's scope the first main section considers the History of the development of the various criteria. This leads to a discussion of the Aims and Purposes of the various authors and sponsors in the main thrust of each of these documents; it is interesting and relevant to know what the authors thought they were doing. Clearly some of the criteria were written with very limited scope in view while others had wider briefs. With an understanding of the aims and purposes of the criteria and their authors and sponsors it is possible to assess the level of Achievement in the various programs; we can ask to what extent they fulfilled the purposes. One of the most interesting aspects of systems security is the balance between the needs of the various sectors; the traditional dichotomy of Civil versus Military is very pronounced in this field. A final section looks at the Prospects for the Future, both in terms of the standards-making bodies and in terms of user needs