KRITERA / CASES
Common Criteria EAL3+ consulting in the energy sector
The product team needed a technical roadmap for ST/PP, evaluation evidence and laboratory coordination.
Approach
A scope, threat model, manual validation, remediation and retest chain was applied.
Scope
- Architecture and data flow
- Identity and authorization
- Manual security testing
Outputs
- Executive summary
- Technical evidence set
- Remediation and retest plan
Outcome
The organization could manage technical risks and governance decisions in one closure plan.