The international framework for evaluating the security of IT products: a developer states security claims in a Security Target, often conforming to a Protection Profile, an accredited lab evaluates the claims at a chosen assurance level, and a national certification body issues a certificate that is recognised by members of the Common Criteria Recognition Arrangement or under the EU EUCC scheme.
This is a summary, not legal advice. Confirm every point against the official text before relying on it, and ask counsel whether it applies to a particular product, transaction, shipment or party.
Standards are the copyright of their publishers. These guides explain purpose, structure and practice in our own words and cite parts or clauses by number; obtain the standard itself from its publisher before you rely on any requirement.
The full lifecycle detail, with its charts, flows, tables and every section, is for registered members. Registration is free and takes a minute. You come back to this page afterwards.