This document is primarily directed to the organisations who plan to apply at BSI for a security certification of an IT-Product, of a Protection Profile or of a development or production environment by using the Common Criteria (ISO/IEC 15408) standard. The document includes information on the procedure as well as relevant pre- and boundary conditions to be considered and aspects of international recognition. It is a refinement of the higher level document on the complete certification program for IT products, processes and services (VB-Produkte.PD).

Revision

• Removed Figure 1: “Document overview (certification and recognition schemes)” and combined Chapter 1 and 2
• Additions to information for the applicant
• Additions to CC:2022
• Additions to certification in the context of eIDAS and additions to the validity
• Responsibilities in the role model
• Process variant in the context of patch management and partial re-evaluation
• Changes to maintenance minor change – removal of the two year restriction
• Editorial amendments and corrections
• Corrections to contact data