Isaiec 62443 Cybersecurity Fundamentals Specialist · Free Practice Question Easy

Question 24

What is the purpose of ISO/IEC 15408 (Common Criteria)?
  • A To describe a process for risk management
  • B To define a security management organization
  • C To describe what constitutes a secure product
  • D To define a product development evaluation methodology
Reveal correct answer

Correct answer: D

Explanation

The purpose of ISO/IEC 15408, also known as the Common Criteria for Information Technology Security Evaluation, is to provide a standardized framework for evaluating the security features and capabilities of information technology products and systems. This framework enables a consistent and repeatable process for assessing the security properties of IT products, ensuring they meet defined security requirements.

Discussion

Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.

You must be logged in to post a comment.

Preparing For

Your Certification?

255+ certifications
Detailed explanations
Free PDF samples

Has All The Questions You Need