Securitv assurance and standards - design for evaluation

This paper presents work in progress within ETSI. The formal approach to review and evaluation as produced by ISO in (1) is being recommended to standards development. The role of standards for telecommunications deployment is often understated. The role of Common Criteria (1) has been important to allow review and assessment of the security provisions in product using standardised tools for review. ETSI, through the work outlined here, is ensuring that the approach started in CC (1) can be applied to the standards used in secure telecommunications deployment. This requires some changes to the way that standards are written in such a way that formal review is possible.