What is a Protection Profile (PP)?
A protection profile is the specification document used by a consumer, consumer group, vendor, or any consortium to specify what functional requirements they would like to have in a commercial IA or IA-enabled products, and to document to what assurance level(s) they would like to have the product tested. Protection Profiles for IA and IA-enabled products can be developed by anyone ranging from a commercial producer to an intended government user of those products. Protection Profiles serve two purposes: • Provide customers with the ability to specify security requirements for their given environment (levels of concern/robustness); and • Serve to identify, for vendors, known markets for products that meet specified customer requirements.
