recommend improvements that would make NIAP’s CC evaluations more
timely, effective, and relevant.
The most significant issues are the lack of criteria pertaining to the
characteristics of software that are considered essential to its security, i.e., lack