Common Criteria is a standard for specifying demands and for evaluating IT products and systems. Common Criteria is a standard with criteria and methods of evaluating security.The mark that is presented on a certified product is used to inform the user that a product or system has been evaluated in accordance with the Common Criteria and the terms of the Common Criteria Recognition Arrangement (CCRA).
For certified products there are, besides the certificate, certification reports and Security Targets published. Information in certification report is used to assess if a product fulfils the specified requirements that are specified in the Security Target.The objective for using Common Criteria is to facilitate evaluation of the security of products and systems compared to the specified requirements. The method is flexible and makes it possible to establish specific demands on a product or a category of products in a Protection Profile.