SQL Server® 2008 Administration: Real World Skills for MCITP Certification and Beyond

Understanding Common Criteria and C2

Information Systems (IS) have become more and more complex over time. To ensure the security of these systems, matching complexity was introduced to the management processes. The governance, risk management, and compliance process is used to govern and manage IS risk and mitigation techniques. The Common Criteria and C2 provide a foundation on which to build secure systems.

So why bother to talk about C2 security? Take a look at the Microsoft objectives for exam 70-432. You'll notice that C2 is mentioned along with Command Criteria. The Common Criteria is so new that C2 compliance is still an important consideration. Additionally, many security professionals argue that C2 is still better because it is more ...