How is the evaluation tailored?
The appointed CTAS company will liaise with the Sponsor, the Customer, Accreditor and CESG to agree the scope of work. Based on the Security Target and the requirements of the Customer and their Accreditor, an Evaluation Work Programme is produced by the evaluation company. This will select the minimum required parts of the CTAS methodology plus additional aspects as required by the Accreditor (with advice from CESG where appropriate). An Evaluation Work Programme template is included as an appendix to the CTAS Methodology (pdf).
