4-6 November | Sheraton Grand Doha, Qatar

Square Peg in a Round Hole—How the CC in the Cloud TWG is Making CC Work for DevOps (U23c)

16 Nov 2022
4:30 pm

Square Peg in a Round Hole—How the CC in the Cloud TWG is Making CC Work for DevOps (U23c)

The Common Criteria in the Cloud Technical Working group has been working on a solution for this problem defined in 2020: There is not yet a defined and accepted method within the Common Criteria that addresses IT product evaluations in the cloud environment.
Today we have three position statements from the US, Canada and Australia and are well positioned to deliver solutions to test products deployed in several scenarios. Still challenges remain including the fact that the CC is for evaluating products and not services, the CC requires that the TOE installation and configuration settings are known and can be described to the customer, and most importantly the use cases are not in the ISO version.
In this talk the author will update the community on progress so far and invite the community to join the effort to expand the CC to be able to provide assurance to the many customers who are moving to the cloud from on premises deployments.