NF EN ISO/IEC 15408-3

May 2026

Standard Current

Information security, cybersecurity and privacy protection - Evaluation criteria for IT security - Part 3: Security assurance components

View the extract New: UPSELL service

Main informations

Collections

National standards and national normative documents

Publication date

May 2026

Number of pages

205 p.

Reference

NF EN ISO/IEC 15408-3

ICS Codes

35.030 IT Security

International kinship

ISO/IEC 15408-3:2026

European kinship

EN ISO/IEC 15408-3:2026

Replaced standards (1)

NF EN ISO/IEC 15408-3

December 2021

Standard Cancelled

Information technology - Security techniques - Evaluation criteria for IT security - Part 3: Security assurance components (ISO/IEC 15408-3:2008, Corrected version 2011-05)

Le présent document définit les exigences d''assurance de l''ISO/IEC 15408. Il comprend les niveaux d''assurance de l''évaluation (Évaluation Assurance Level, EAL) qui définissent une échelle pour mesurer l''assurance pour les cibles d''évaluation (Targets of Évaluation, TOE) des composants, les paquets d''assurance composés (Composed Assurance Packages, CAP) qui définissent une échelle pour mesurer l''assurance des TOE composées, les composants individuels d''assurance à partir desquels sont composés les niveaux et les paquets d''assurance, et les critères pour l''évaluation des profils de protection (Protection Profiles, PP) et des cibles de sécurité (Security Targets, ST).

ZOOM ON ... the Requirements department

To comply with a standard, you need to quickly understand its issues in order to determine its impact on your activity.

The Requirements department helps you quickly locate within the normative text:
- mandatory clauses to satisfy,
- non-essential but useful clauses to know, such as permissions and recommendations.

The identification of these types of clauses is based on the document “ISO / IEC Directives, Part 2 - Principles and rules of structure and drafting of ISO documents ”as well as on a constantly enriched list of verbal forms.

With Requirements, quickly access the main part of the normative text!

With Requirements, quickly access the main part of the normative text!

What is the Redline format?

The Redline + service - standards comparator allows you to easily and simply identify major changes between the current standard and its last canceled version.

At a glance, you will be able to identify the additions, deletions or modifications to a text, table, figure and formula.

At a glance, you will be able to identify the additions, deletions or modifications to a text, table, figure and formula

The Redlines + service is offered to you on the collection of French standards in force, in French language and in HTML and PDF format.

For an overview of the service, click on View a standard in redline format

New: UPSELL service

- The UPSELL service allows you to easily update one of your standards.
- With a single click, add a new language, the Requirements or Redline+ service and add one or more additional users.
- Whether you are in the process of acquiring a standard or it is already available in your personal space, the UPSELL service is available at every stage to help you understand it and implement it within your organization.

Need to identify, monitor and decipher standards?

COBAZ is the simple and effective solution to meet the normative needs related to your activity, in France and abroad.

Available by subscription, CObaz is THE modular solution to compose according to your needs today and tomorrow. Quickly discover CObaz!

Request your free, no-obligation live demo

I discover COBAZ