SIST EN ISO/IEC 15408-5:2026

Information security, cybersecurity and privacy protection - Evaluation criteria for IT security - Part 5: Pre-defined packages of security requirements (ISO/IEC 15408-5:2026)

This document provides packages of security assurance and security functional requirements that are intended to be useful in support of common usage by stakeholders.
The users of this document can include consumers, developers and evaluators of secure IT products.

Informationssicherheit, Cybersicherheit und Schutz der Privatsphäre - Evaluationskriterien für IT-Sicherheit - Teil 5: Vordefinierte Pakete von Sicherheitsanforderungen (ISO/IEC 15408-5:2026)

Sécurité de l'information, cybersécurité et protection de la vie privée - Critères d'évaluation pour la sécurité des technologies de l'information - Partie 5: Paquets prédéfinis d'exigences de sécurité (ISO/IEC 15408-5:2026)

Le présent document fournit des paquets d'exigences fonctionnelles de sécurité et d'assurance de sécurité qui sont destinés à être utiles à l'appui d'une utilisation commune par les parties prenantes.
Les utilisateurs du présent document comprennent les consommateurs, les développeurs et les évaluateurs de produits TI sûrs.

Informacijska varnost, kibernetska varnost in varstvo zasebnosti - Merila za ocenjevanje varnosti IT - 5. del: Vnaprej določeni paketi varnostnih zahtev (ISO/IEC 15408-5:2026)

Ta dokument zagotavlja pakete zahtev za varnostno zagotovilo in varnostne funkcionalne zahteve, ki naj bi bili koristni pri podpori skupne uporabe s strani deležnikov.
Uporabniki tega dokumenta lahko vključujejo potrošnike, razvijalce in ocenjevalce varnih IT izdelkov.

General Information

• Status: Published
• Public Enquiry End Date: 10-Nov-2024
• Publication Date: 17-Jun-2026
• ICS: 35.030 - IT Security
• Technical Committee: ITC - Information technology
• Current Stage: 6060 - National Implementation/Publication (Adopted Project)
• Start Date: 18-May-2026
• Due Date: 23-Jul-2026
• Completion Date: 18-Jun-2026
• Ref Project: EN ISO/IEC 15408-5:2026 - Information security, cybersecurity and privacy protection - Evaluation criteria for IT security - Part 5: Pre-defined packages of security requirements (ISO/IEC 15408-5:2026)

Relations

• Replaces: SIST EN ISO/IEC 15408-5:2024 - Information security, cybersecurity and privacy protection - Evaluation criteria for IT security - Part 5: Pre-defined packages of security requirements (ISO/IEC 15408-5:2022)
• Effective Date: 01-Jul-2026

Overview

SIST EN ISO/IEC 15408-5:2026 defines standardized packages of security assurance and security functional requirements for information security, cybersecurity, and privacy protection in IT systems. As Part 5 of the widely recognized ISO/IEC 15408 (Common Criteria) series, this standard is designed to streamline and harmonize the evaluation of IT security by providing pre-defined packages that can be directly referenced by stakeholders. These packages are crafted to support common usage in Protection Profiles (PPs), Security Targets (STs), and other evaluation contexts, simplifying the complex task of specifying and assessing security requirements.

The standard is highly relevant for a broad range of users, including:

• Consumers seeking to compare and select secure IT products,
• Developers aiming to meet established security requirements,
• Evaluators performing systematic security assessments.

Key Topics

SIST EN ISO/IEC 15408-5:2026 organizes security requirements into logical families of packages for ease of reference and application:

• Evaluation Assurance Levels (EAL): A set of ascending assurance levels that reflect increasing rigor in IT security evaluation, from functionally tested (EAL1) up to formally verified and tested (EAL7).
• Composed Assurance Packages (CAP): Packages designed for evaluating the security of systems composed of multiple elements or products.
• Composite Product Packages (COMP): Requirements packages supporting assessment of composite IT products.
• Protection Profile Assurances (PPA): Packages that standardize the evaluation process for Protection Profiles, ensuring repeatability and consistency.
• Security Target Assurances (STA): Packages for Security Target evaluation, guiding the requirements for security claims in IT products.

These pre-defined packages help stakeholders align with recognized international best practices, promoting interoperability, transparency, and uniform assurance in IT security evaluation.

Applications

The practical applications of SIST EN ISO/IEC 15408-5:2026 span multiple domains within IT security management and product development:

• Security Specification: Developers can efficiently specify the security functionality and assurance of their products using pre-defined packages, reducing time and uncertainty.
• Procurement and Vendor Assessment: Consumers and organizations can reference standardized packages when procuring secure IT solutions, ensuring baseline compliance and facilitating clear comparisons between offerings.
• Regulatory Compliance: Evaluators and regulators can rely on pre-defined packages to ensure consistent, transparent, and repeatable security assessments.
• Protection Profile and Security Target Development: Organizations developing PPs and STs benefit from the structured approach, minimizing effort and errors in defining appropriate security requirements.
• Product Certification: IT products evaluated and certified against the requirements in this standard can offer stronger assurance to end-users, supporting market confidence and global acceptance.

Related Standards

SIST EN ISO/IEC 15408-5:2026 is part of the ISO/IEC 15408 (Common Criteria) series, which collectively underpin IT security evaluation worldwide. Related standards include:

• ISO/IEC 15408-1: Introduction and general model for IT security evaluation criteria.
• ISO/IEC 15408-2: Security functional components specification.
• ISO/IEC 15408-3: Security assurance components and detailed assurance requirements.

These standards offer a comprehensive framework for developing, evaluating, and procuring secure IT products, with Part 5 delivering structured packages that support efficiency and global harmonization in the application of security evaluation criteria.

Keywords: Information security, cybersecurity, privacy protection, evaluation criteria, IT security, assurance packages, Common Criteria, security requirements, standardized packages, ISO/IEC 15408-5.

Standards Content (Sample)

SLOVENSKI STANDARD
01-julij-2026
Nadomešča:
SIST EN ISO/IEC 15408-5:2024
Informacijska varnost, kibernetska varnost in varstvo zasebnosti - Merila za
vrednotenje varnosti IT - 5. del: Vnaprej določeni paketi varnostnih zahtev (ISO/IEC
15408-5:2026)
Information security, cybersecurity and privacy protection - Evaluation criteria for IT
security - Part 5: Pre-defined packages of security requirements (ISO/IEC 15408-5:2026)
Informationssicherheit, Cybersicherheit und Schutz der Privatsphäre -
Evaluationskriterien für IT-Sicherheit - Teil 5: Vordefinierte Pakete von
Sicherheitsanforderungen (ISO/IEC 15408-5:2026)
Sécurité de l'information, cybersécurité et protection de la vie privée - Critères
d'évaluation pour la sécurité des technologies de l'information - Partie 5: Paquets
prédéfinis d'exigences de sécurité (ISO/IEC 15408-5:2026)
Ta slovenski standard je istoveten z: EN ISO/IEC 15408-5:2026
ICS:
35.030 Informacijska varnost IT Security
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

EUROPEAN STANDARD EN ISO/IEC 15408-5

NORME EUROPÉENNE
EUROPÄISCHE NORM
May 2026
ICS 35.030
Supersedes EN ISO/IEC 15408-5:2023
English version
Information security, cybersecurity and privacy protection
- Evaluation criteria for IT security - Part 5: Pre-defined
packages of security requirements (ISO/IEC 15408-
5:2026)
Sécurité de l'information, cybersécurité et protection Informationssicherheit, Cybersicherheit und Schutz
de la vie privée - Critères d'évaluation pour la sécurité der Privatsphäre - Evaluationskriterien für IT-
des technologies de l'information - Partie 5: Paquets Sicherheit - Teil 5: Vordefinierte Pakete von
prédéfinis d'exigences de sécurité (ISO/IEC 15408- Sicherheitsanforderungen (ISO/IEC 15408-5:2026)
5:2026)
This European Standard was approved by CEN on 9 January 2026.

CEN and CENELEC members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for
giving this European Standard the status of a national standard without any alteration. Up-to-date lists and bibliographical
references concerning such national standards may be obtained on application to the CEN-CENELEC Management Centre or to
any CEN and CENELEC member.
This European Standard exists in three official versions (English, French, German). A version in any other language made by
translation under the responsibility of a CEN and CENELEC member into its own language and notified to the CEN-CENELEC
Management Centre has the same status as the official versions.

CEN and CENELEC members are the national standards bodies and national electrotechnical committees of Austria, Belgium,
Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy,
Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Republic of North Macedonia, Romania, Serbia,
Slovakia, Slovenia, Spain, Sweden, Switzerland, Türkiye and United Kingdom.

CEN-CENELEC Management Centre:
Rue de la Science 23, B-1040 Brussels
© 2026 CEN/CENELEC All rights of exploitation in any form and by any means
Ref. No. EN ISO/IEC 15408-5:2026 E
reserved worldwide for CEN national Members and for
CENELEC Members.
Contents Page
European foreword . 3

European foreword
This document (EN ISO/IEC 15408-5:2026) has been prepared by Technical Committee ISO/IEC JTC 1
"Information technology" in collaboration with Technical Committee CEN-CENELEC/ JTC 13
“Cybersecurity and Data Protection” the secretariat of which is held by DIN.
This European Standard shall be given the status of a national standard, either by publication of an
identical text or by endorsement, at the latest by November 2026, and conflicting national standards
shall be withdrawn at the latest by November 2026.
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. CEN-CENELEC shall not be held responsible for identifying any or all such patent rights.
This document supersedes EN ISO/IEC 15408-5:2023.
Any feedback and questions on this document should be directed to the users’ national standards
body/national committee. A complete listing of these bodies can be found on the CEN and CENELEC
websites.
According to the CEN-CENELEC Internal Regulations, the national standards organizations of the
following countries are bound to implement this European Standard: Austria, Belgium, Bulgaria,
Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland,
Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Republic of
North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Türkiye and the
United Kingdom.
Endorsement notice
The text of ISO/IEC 15408-5:2026 has been approved by CEN-CENELEC as EN ISO/IEC 15408-5:2026
without any modification.
International
Standard
ISO/IEC 15408-5
Second edition
Information security, cybersecurity
2026-04
and privacy protection —
Evaluation criteria for IT security —
Part 5:
Pre-defined packages of security
requirements
Sécurité de l'information, cybersécurité et protection de la vie
privée — Critères d'évaluation pour la sécurité des technologies
de l'information —
Partie 5: Paquets prédéfinis d'exigences de sécurité
Reference number
ISO/IEC 15408-5:2026(en) © ISO/IEC 2026

ISO/IEC 15408-5:2026(en)
© ISO/IEC 2026
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
© ISO/IEC 2026 – All rights reserved
ii
ISO/IEC 15408-5:2026(en)
Contents Page
Foreword .vi
Introduction .vii
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Evaluation assurance levels (EAL) . 1
4.1 Family name .1
4.2 Family overview .1
4.2.1 General .1
4.2.2 Relationship between assurances and assurance levels .2
4.3 Family objectives .4
4.4 Evaluation assurance level 1 (EAL1) — Functionally tested .5
4.4.1 Package name .5
4.4.2 Package type .5
4.4.3 Package overview .5
4.4.4 Package objectives .5
4.4.5 Package components.5
4.5 Evaluation assurance level 2 (EAL2) — Structurally tested .6
4.5.1 Package name .6
4.5.2 Package type .6
4.5.3 Package overview .6
4.5.4 Package objectives .6
4.5.5 Package components.7
4.6 Evaluation assurance level 3 (EAL3) — Methodically tested and checked .7
4.6.1 Package name .7
4.6.2 Package type .7
4.6.3 Package overview .7
4.6.4 Package objectives .8
4.6.5 Package components.8
4.7 Evaluation assurance level 4 (EAL4) — Methodically designed, tested and reviewed .9
4.7.1 Package name .9
4.7.2 Package type .9
4.7.3 Package overview .9
4.7.4 Package objectives .9
4.7.5 Package components.9
4.8 Evaluation assurance level 5 (EAL5) — Semi-formally designed and tested .10
4.8.1 Package name .10
4.8.2 Package type .10
4.8.3 Package overview .10
4.8.4 Package objectives .10
4.8.5 Package components.11
4.9 Evaluation assurance level 6 (EAL6) — Semi-formally verified design and tested . 12
4.9.1 Package name . 12
4.9.2 Package type . 12
4.9.3 Package overview . 12
4.9.4 Package objectives . 12
4.9.5 Package components. 12
4.10 Evaluation assurance level 7 (EAL7) — Formally verified design and tested . 13
4.10.1 Package name . 13
4.10.2 Package type . 13
4.10.3 Package overview .14
4.10.4 Package objectives .14
4.10.5 Package components.14

© ISO/IEC 2026 – All rights reserved
iii
ISO/IEC 15408-5:2026(en)
5 Composed assurance packages (CAP) .15
5.1 Family name . 15
5.2 Family overview . 15
5.2.1 General . 15
5.2.2 Relationship between assurances and assurance packages . 15
5.3 Family objectives .17
5.4 Composed assurance package A (CAP-A) — Structurally composed .18
5.4.1 Package name .18
5.4.2 Package type .18
5.4.3 Package overview .18
5.4.4 Package objectives .18
5.4.5 Package components.18
5.5 Composed assurance package B (CAP-B) — Methodically composed .19
5.5.1 Package name .19
5.5.2 Package type .19
5.5.3 Package overview .19
5.5.4 Package objectives .19
5.5.5 Package components. 20
5.6 Composed assurance package C (CAP-C) — Methodically composed, tested and
reviewed . 20
5.6.1 Package name . 20
5.6.2 Package type . 20
5.6.3 Package overview . 20
5.6.4 Package objectives . 20
5.6.5 Package components.21
6 Composite product packages (COMP) .21
6.1 Family name .21
6.2 Family overview .21
6.3 Family objectives . 22
6.4 Composite product package 1 (COMP1) — Consistent, integrated, tested and assessed . 22
6.4.1 Package name . 22
6.4.2 Package type . 22
6.4.3 Package overview . 22
6.4.4 Package objectives . 22
6.4.5 Package components. 22
7 Protection profile assurances (PPA) .23
7.1 Family name . 23
7.2 Family overview . 23
7.3 Family objectives .24
7.4 Protection profile assurance DR (PPA-DR) — Direct rationale .24
7.4.1 Package name .24
7.4.2 Package type .24
7.4.3 Package overview .24
7.4.4 Package objectives .24
7.4.5 Package components.24
7.5 Protection profile assurance STD (PPA-STD) — Standard .24
7.5.1 Package name .24
7.5.2 Package type .24
7.5.3 Package overview .24
7.5.4 Package objectives . 25
7.5.5 Package components. 25
8 Security target assurances (STA) .25
8.1 Family name . 25
8.2 Family overview . 25
8.3 Family objectives . 26
8.4 Security target assurance DR (STA-DR) — Direct rationale . 26
8.4.1 Package name . 26

© ISO/IEC 2026 – All rights reserved
iv
ISO/IEC 15408-5:2026(en)
8.4.2 Package type . 26
8.4.3 Package overview . 26
8.4.4 Package objectives . 26
8.4.5 Package components. 26
8.5 Security target assurance STD (STA-STD) — Standard . 26
8.5.1 Package name . 26
8.5.2 Package type . 26
8.5.3 Package overview . 26
8.5.4 Package objectives .27
8.5.5 Package components.27

© ISO/IEC 2026 – All rights reserved
v
ISO/IEC 15408-5:2026(en)
Foreword
ISO (the International Organization for Standardization) and IEC (the International Electrotechnical
Commission) form the specialized system for worldwide standardization. National bodies that are
members of ISO or IEC participate in the development of International Standards through technical
committees established by the respective organization to deal with particular fields of technical activity.
ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations,
governmental and non-governmental, in liaison with ISO and IEC, also take part in the work.
The procedures used to develop this document and those intended for its further maintenance are described
in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the different types
of document should be noted. This document was drafted in accordance with the editorial rules of the ISO/
IEC Directives, Part 2 (see www.iso.org/directives or www.iec.ch/members_experts/refdocs).
ISO and IEC draw attention to the possibility that the implementation of this document may involve the
use of (a) patent(s). ISO and IEC take no position concerning the evidence, validity or applicability of any
claimed patent rights in respect thereof. As of the date of publication of this document, ISO and IEC had not
received notice of (a) patent(s) which may be required to implement this document. However, implementers
are cautioned that this may not represent the latest information, which may be obtained from the patent
database available at www.iso.org/patents and https://patents.iec.ch. ISO and IEC shall not be held
responsible for identifying any or all such patent rights.
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and expressions
related to conformity assessment, as well as information about ISO's adherence to the World Trade
Organization (WTO) principles in the Technical Barriers to Trade (TBT) see www.iso.org/iso/foreword.html.
In the IEC, see www.iec.ch/understanding-standards.
This document was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology,
Subcommittee SC 27, Information security, cybersecurity and privacy protection, in collaboration with the
European Committee for Standardization (CEN) Technical Committee CEN/CLC/JTC 13, Cybersecurity and
data protection, in accordance with the Agreement on technical cooperation between ISO and CEN (Vienna
Agreement).
This second edition cancels and replaces the first edition (ISO/IEC 15408-5:2022), which has been technically
revised.
The main changes are as follows:
— the terminology has been reviewed and updated;
— mistakes have been corrected.
A list of all parts in the ISO/IEC 15408 series can be found on the ISO and IEC websites.
Any feedback or questions on this document should be directed to the user’s national standards
body. A complete listing of these bodies can be found at www.iso.org/members.html and
www.iec.ch/national-committees.

© ISO/IEC 2026 – All rights reserved
vi
ISO/IEC 15408-5:2026(en)
Introduction
This document provides pre-defined packages of security requirements. Such security requirements can be
useful for stakeholders as they strive for conformity between evaluations. Packages of security requirements
can also help reduce the effort in developing Protection Profiles (PPs) and Security Targets (STs).
ISO/IEC 15408-1 defines the term “package” and describes the fundamental concepts concerning packages.
This document presents:
— evaluation assurance levels (EAL) (see Clause 4) family of packages that specify pre-defined sets of
security assurance components that may be referenced in PPs and STs and which specify appropriate
security assurances to be provided during an evaluation of a target of evaluation (TOE);
— composed assurance packages (CAP) (see Clause 5) family of packages that specify sets of security
assurance components used for specifying appropriate security assurances to be provided during an
evaluation of composed TOEs;
— composite product packages (COMP) (see Clause 6) family of packages that specifies a set of security
assurance components used for specifying appropriate security assurances to be provided during an
evaluation of a composite product TOEs;
— protection profile assurances (PPA) (see Clause 7) family of packages that specify sets of security
assurance components used for specifying appropriate security assurances to be provided during a
protection profile evaluation;
— security target assurances (STA) (see Clause 8) family of packages that specify sets of security assurance
components used for specifying appropriate security assurances to be provided during a security target
evaluation.
This document uses bold type to highlight hierarchical relationships between package objectives. This
convention calls for the use of bold type for all new objectives.
Several governmental organizations have contributed to the development of this version of the Common
Methodology for Information Technology Security Evaluations. As the joint holders of the copyright in
the Common Methodology for Information Technology Security Evaluations (called CEM), they hereby
grant non-exclusive license to ISO/IEC to use CEM in the continued development/maintenance of the
ISO/IEC 15408-5 International Standard. However, these governmental organizations retain the right to
use, copy, distribute, translate, or modify CEM as they see fit. More information on these agencies can be
found at https://commoncriteriaportal.org/cc/copyright/index.cfm.

© ISO/IEC 2026 – All rights reserved
vii
International Standard ISO/IEC 15408-5:2026(en)
Information security, cybersecurity and privacy protection —
Evaluation criteria for IT security —
Part 5:
Pre-defined packages of security requirements
1 Scope
This document provides packages of security assurance and security functional requirements that are
intended to be useful in support of common usage by stakeholders.
The users of this document can include consumers, developers and evaluators of secure IT products.
2 Normative references
The following documents are referred to in the text in such a way that some or all of their content constitutes
requirements of this document. For dated references, only the edition cited applies. For undated references,
the latest edition of the referenced document (including any amendments) applies.
ISO/IEC 15408-1:2026, Information security, cybersecurity and privacy protection — Evaluation criteria for IT
security — Part 1: Introduction and general model
ISO/IEC 15408-3:2026, Information security, cybersecurity and privacy protection — Evaluation criteria for IT
security — Part 3: Security assurance components
3 Terms and definitions
For the purposes of this document, the terms and definitions given in ISO/IEC 15408-1 and ISO/IEC 15408-3
apply.
ISO and IEC maintain terminology databases for use in standardization at the following addresses:
— ISO Online browsing platform: available at https:// www .iso .org/ obp;
— IEC Electropedia: available at https:// www .electropedia .org.
4 Evaluation assurance levels (EAL)
4.1 Family name
The name of this family of packages is evaluation assurance levels (EALs).
4.2 Family overview
4.2.1 General
The EALs provide an increasing scale that balances the level of assurance obtained with the cost and
feasibility of acquiring that degree of assurance. The approach of ISO/IEC 15408-1 identifies the separate

© ISO/IEC 2026 – All rights reserved
ISO/IEC 15408-5:2026(en)
concepts of assurance in a TOE at the end of the evaluation, and of maintenance of that assurance during the
operational use of the TOE.
NOTE Not all families and components given in ISO/IEC 15408-3 are included in the EALs. This is not to say that
these do not provide meaningful and desirable assurances. Instead, it is expected that these families and components
can be considered for augmentation of an EAL in those Protection Profiles (PPs) and Security Targets (STs) for which
they provide utility. Additionally, some classes found in ISO/IEC 15408-3 are not relevant for the EALs. Examples of
such classes include class APE (Protection Profile (PP) evaluation) (see ISO/IEC 15408-3:2026,Clause 7) and class ACO
(Composition) (see ISO/IEC 15408-3:2026, Clause 15).
A set of assurance components have been chosen for each EAL.
A higher level of assurance than that provided by a given EAL can be achieved by:
— including additional assurance components from other assurance families; or
— replacing an assurance component with a higher-level assurance component from the same assurance
family.
4.2.2 Relationship between assurances and assurance levels
Figure 1 illustrates the relationship between the security assurance requirements (SARs) found in
ISO/IEC 15408-3 and the assurance levels defined in this document. While assurance components further
decompose into assurance elements, assurance elements cannot be individually referenced by assurance
levels.
© ISO/IEC 2026 – All rights reserved
ISO/IEC 15408-5:2026(en)
NOTE The arrow in the figure represents a reference from an EAL to an assurance component within the class
where it is defined.
Figure 1 — Assurance and assurance level association
Table 1 represents a summary of the EAL.

© ISO/IEC 2026 – All rights reserved
ISO/IEC 15408-5:2026(en)
Table 1 — Evaluation assurance level summary
Assurance class Assurance EAL1 EAL2 EAL3 EAL4 EAL5 EAL6 EAL7
Family
ADV (Develop- ADV_ARC 1 1 1 1 1 1
ment)
ADV_FSP 1 2 3 4 5 5 6
ADV_IMP  1 1 2 2
ADV_INT  2 3 3
ADV_SPM   1 1
ADV_TDS 1 2 3 4 5 6
AGD (Guidance AGD_OPE 1 1 1 1 1 1 1
documents)
AGD_PRE 1 1 1 1 1 1 1
ALC (life cycle ALC_CMC 1 2 3 4 4 5 5
support)
ALC_CMS 1 2 3 4 5 5 5
ALC_DEL 1 1 1 1 1 1
ALC_DVS 1 1 1 2 2
ALC_LCD 1 1 1 1 2
ALC_TAT  1 2 3 3
ASE (Security ASE_CCL 1 1 1 1 1 1 1
Target (ST) evalu-
ASE_ECD 1 1 1 1 1 1 1
ation)
ASE_INT 1 1 1 1 1 1 1
ASE_OBJ 1 2 2 2 2 2 2
ASE_REQ 1 2 2 2 2 2 2
ASE_SPD 1 1 1 1 1 1
ASE_TSS 1 1 1 1 1 1 1
ATE (Tests) ATE_COV 1 2 2 2 3 3
ATE_DPT 1 1 3 3 4
ATE_FUN 1 1 1 1 2 2
ATE_IND 1 2 2 2 2 2 3
AVA (Vulnerability AVA_VAN 1 2 2 3 4 5 5
assessment)
The columns represent a hierarchically ordered set of EALs, while the rows represent assurance families.
Each number in the resulting matrix identifies a specific assurance component where applicable.
Those items marked in grey are not applicable in the EAL specification. However, they can be used to
augment the EAL package.
NOTE Although the ALC_FLR (Flaw remediation) (see ISO/IEC 15408-3:2026, 12.6) and ALC_TDA (TOE
development artefacts) (see ISO/IEC 15408-3:2026, 12.8) families are not shown, they are often used as an
augmentation to the EALs.
4.3 Family objectives
Seven hierarchically ordered evaluation assurance levels are defined in this document for the rating of a
TOE’s assurance. They are hierarchically ordered inasmuch as each EAL represents more assurance than
all lower EALs. The increase in assurance from one EAL to another is accomplished by substitution of a
hierarchically higher assurance component from the same assurance family (i.e. increasing rigour, scope
and depth) and from the addition of assurance components from other assurance families (i.e. adding new
requirements).
© ISO/IEC 2026 – All rights reserved
ISO/IEC 15408-5:2026(en)
These EALs consist of an appropriate combination of assurance components as described in ISO/IEC 15408-3.
More precisely, each EAL includes no more than one component of each assurance family and all the
assurance dependencies of every component are addressed.
The notion of “augmentation” allows the addition of assurance components (from assurance families not
already included in the EAL) or the substitution of assurance components (with another hierarchically
higher assurance component in the same assurance family) to an EAL. Of the assurance constructs defined
in ISO/IEC 15408-1, only EALs may be augmented. The notion of an “EAL minus a constituent assurance
component” is not recognized in ISO/IEC 15408-1 as a valid claim. Augmentation carries with it the obligation
on the part of the claimant to justify the utility and added value of the added assurance component to the
EAL. An EAL may also be augmented with extended assurance requirements.
NOTE An EAL cannot be augmented if it is included in an ST that claims exact conformance to a PP.
4.4 Evaluation assurance level 1 (EAL1) — Functionally tested
4.4.1 Package name
The name of the package is evaluation assurance level 1 (EAL1) — Functionally tested.
4.4.2 Package type
This is an assurance package.
4.4.3 Package overview
EAL1 is applicable where some confidence in correct operation is required, but the threats to security are
not viewed as serious. Where independent assurance is required to support the contention that due care has
been exercised with respect to the protection of personal or similar information, the application of EAL1 is
recommended.
EAL1 requires only a limited ST. It is sufficient to simply state the required security functional requirements
(SFRs) for the TOE, rather than deriving them from threats, organizational security policies (OSPs) and
assumptions through security objectives.
EAL1 provides an evaluation of the TOE as made available to the customer, including independent testing
against a specification, and an examination of the guidance documentation provided. It is intended that an
EAL1 evaluat
...