How to develop secure IT products using Common Criteria

Abstract

The engineering organization must during development and maintenance of a certified IT product (digital tachometer) comply with mandatory, external information security requirements in Common Criteria (ISO/IEC 15408). This has impact on work procedures, developers, managers, testing and manufacturing, Strict change management and tracing of reqirements is a must. The Requirements must be fulfilled and proved by a third party certification body in order to certify the product.