What is the difference between ITSEC and Common Criteria certification?
SAP R/3 has been evaluated and certified according to the international ITSEC standard (Information Technology Security Evaluation Criteria). The evaluation was successfully completed in function class “F-C2” and evaluation level E2 medium. The ITSEC standard evolved from the US standard TCSEC (Trusted Computer System Evaluation Criteria, “Orange Book”). ITSEC security certificates are recognized in the following countries: Germany, Finland, France, Greece, Great Britain, Itlay, Netherlands, Norway, Portugal, Sweden, Switzerland, and Spain. For further information on ITSEC and the SAP evaluation, please have a look at the SAP Service Marketplace: http://service.sap.com/securitycertification. Security standards are constantly evolving. The latest standard is Common Criteria 2.1. This developed from ITSEC, TCSEC, CTCPEC, and FC (Federal Criteria for Information Technology Security). Common Criteria certificates up to evaluation level EAL 4 are recognized in many major countries, among th
