Results and Experience of the First Pilot on Patch Management (ALC_PAM) in BSI (A23b)
A high level of trustworthiness in CC certifications require high evaluation efforts, since proven security can only be based on knowledge and facts, not on trust. An unjustified criticism of the Common Criteria is the high degree of effort and time required to reach a high EAL. With Patch Management ALC_PAM, there is now for the first time a realistic chance to substantially reduce this effort without sacrificing security. This talk is intended to present how the new Patch Management methodology was applied in a first pilot and what the results of the first pilot on ALC_PAM are.