ITSEC Criteria

To provide for building and evaluating secure computer products using internationally accepted criteria.
The Information Technology Security Evaluation Criteria (ITSEC) describes evaluation procedures and requirements.
The criteria include security assurances but have no feature requirements (security features are specified in the Security Target document for the product under evaluation).
TCSEC levels are optional feature sets.
Evaluation levels range from E-1 (least assurance) to E-6 (most assurance).
TCSEC C2 and B1 are roughly equivalent to ITSEC F-C2/E2 and F-B1/E3 respectively.

To provide for building and evaluating secure computer products using internationally accepted criteria.