Certifying Modern Development Environments Under Common Criteria (A22a)
Secure development environments have traditionally been assessed against MSSR measures. However, as development environments shift toward cloud infrastructure, MSSR appears limited in its ability to reflect reality. Can a cloud-based development environment truly be certified under the current Common Criteria framework? Or are the presenters forcing contemporary practices into a model designed for a different era? This panel brings together Certification Bodies, developers, and IT Security Evaluation Facilities to challenge assumptions and share practical experiences. The discussion will explore where MSSR aligns with today’s development ecosystems, where it falls short, and whether interpretation, adaptation, or fundamental change is required to maintain both assurance and relevance.