Common Criteria in the Cloud – Certification for IT Products No Longer in Your Server Room (C12a)
Common Criteria has a long history of security evaluation and certification of IT products intended for installation and secure configuration in private data centers, in Europe and beyond. With more IT products being hosted in cloud facilities, the Common Criteria in the Cloud Working Group has been developing guidance since 2020 to support Common Criteria evaluations for cloud-hosted IT products. This talk will give an overview of the progress of this working group and propose how this work may be used for IT products being evaluated under EUCC, hosted on EU-CSA certified cloud services.