CELEX: 51994PC0037
Language: en
Date: 1994-02-09
Title: Amended proposal for a Council Recommendation on Common Information Technology Security Evaluation Criteria

COMMISSION OF THE EUROPEAN COVMUNITIES
                                                                       C0M(94) 37 final
                                                                       Brussels. 09.02.1994
                                                                       94/0033 (CNS)
                                                 Amended proposal for a
                                                 Council RecommpnHaii^n
                                                       on Common
                                    Information Technology Security Evaluation Criteria
                 1 ("•
iM8fr ^v*ffll
                            (presented by the Commission pursuant to A r t i c l e 189 A ( 2 )
                                                   of the EC-Treaty)
                 îîJi
É.M:;* :" i ta
      ^   SfrUt»
             V03
 ---pagebreak---                                                -2 ~
                                EXPLANATORY HEHOBAWPUH
1.  This Communication concerns a modified proposal for a Council Recommendation
    on Common Information Technology Security Evaluation Criteria.
    The objective of the Council Recommendation is to provide common security criteria
    for information systems, for use in evaluation and certification schemes within the
    Community.
    Common criteria represent an important step in achieving first a single Community
    market znd in the future an international market in secure information technology
    (IT) products, with all the obvious advantages for both manufacturers and users.
    Manufacturers will be able to build products and users to specify requirements to
    known, acceptable levels of security.
2.  The Commission submitted its proposal to the Council on 11 September 1992 -
    COM(92)298 final.
    In their Opinion of 27 January 1993 the Economic and Social Committee welcomed
    the proposal.
3.  The European Parliament adopted a favourable Resolution on 25 May 1993, including
    a single amendment, adding some text. The amendment was justified on the grounds
     of the unnecessary extra costs involved if multiple evaluations had to be carried out on
     a single product to meet the needs of the international marketplace.
     The amendment was accepted by the Commission.
 4.  Decision requested from Council:
     T h e Commission requests the Council to adopt the amended proposal for a Council
     Recommendation on Information Technology Security Evaluation Criteria.
 ---pagebreak---                                        -à-
                     MODIFICATION N° 1 (BASED ON E P AMENDMENT N° I)
Original Commission Proposai                    Modified Proposal
                                         Article 2
2.      to advance, under the auspices of       2. to advance, under the auspices of
SOG-IS, international harmonisation and         SOG-IS, international harmonisation and
standardisation of information technology       standardisation of information technology
evaluation criteria;                            evaluation criteria;
                                                2a. the negotiation, during this initial
                                                period of two years, or. if necessary, until
                                                international        harmonisation      and
                                                standardisation is agreed, of bilateral and
                                                preferably international mutual recognition
                                                of security evaluation certificates.
 ---pagebreak---                                                 -<H
                                                                     ISSN 0254-1475
                                                               COM(94) 37 final
                                                      DOCUMENTS
EN                                                                              15
                                 Catalogue number : CB-CO-94-043-EN-C
                                                             ISBN 92-77-65083-4
Office for Official Publications of the European Communities
L-2985 Luxembourg