What is ITSEC and how does it relate to the Common Criteria?
The Information Technology Security Evaluation Criteria (ITSEC) was originally developed by four European countries to complement the US Trusted Computer Security Evaluation Criteria (TCSEC) or “Orange Book” in the 1980’s and early 1990’s. The US TCSEC and the European ITSEC were the predecessors of the Common Criteria, with similar properties such as multiple levels of assurance. ITSEC has largely been replaced by the Common Criteria in order to leverage the wider international recognition that the Common Criteria offers.
