A competency assessment for a CC (Common Criteria) Evaluator is completed at the request of a CC (Common Criteria) testing laboratory as part of the accreditation of testing laboratories. Within the CC (Common Criteria) testing laboratories, the CC (Common Criteria) evaluators conduct the evaluations. To do so, they must complete a competency assessment.

The requirements for the competencies to be held by CC (Common Criteria) evaluators are described in the document CC Evaluator requirements for competency assessments as a Common Criteria Evaluator. Proof of competency requires the successful completion of the Common Criteria Workshop at the BSI. The workshop covers the following content:

Introduction to the protection profile and security target constructs

1. Introduction to CC and the general CC model
2. CC constructs and their significance/benefits
3. Workshop 1: Preparing the Security Problem Definition and the security targets
4. Requirements from the CC for security functionality
   Workshop 2: Deriving the security target from a manufacturer's product description
5. CC assurance requirements
6. The justification sections in PP/ST, while accounting for the PP/ST evaluation criteria
7. BSI certification scheme

Introduction to the evaluation

• Workshop 3: PP (Protection Profile) evaluation
• Aspects of AVA effectiveness
• Workshop 4: Assessment of vulnerabilities
• Workshop 5: Correspondence analysis
• Usage of CEM and current status
• Layout/structure of CC audit reports
• Workshop 6: Evaluation of the TOE Design TDS
• Workshop 7: ARC
• Workshop 8: Testing
• Final test