Blog categorized as Publications

Developments in cybersecurity regulations

Cybersecurity is constantly evolving. As the industry matures, thousand developments are occurring simultaneously and in different areas. One significant development with far-reaching potential is the introduction of the EU Cybersecurity Act of 2019.
24.03.2021 09:47 AM
Read more

Security evidence: a worthwhile investment

The IoT industry is increasingly beginning to realise that security has great value, not just to consumers, but to businesses as well. The ability to demonstrate the security features of products and services beyond the statement “Trust me” provides several major benefits.
02.03.2021 08:58 AM
Read more

COMMON CRITERIA GUIDANCE FOR DEVELOPERS, EVALUATION ASSURANCE LEVEL 4, V1.5

The latest comprehensive guide for developers who are interested in having their products evaluated and certified using Common Criteria methodology (EAL4).
We welcome comments and discussions with our experts on the topics, please feel free to contact us: commoncriteria@brightsight.com
18.02.2020 08:45 AM
Read more

Assessing the security of “simple” IoT devices - part 1

The Internet of Things is more and more dependent on the Security of Things. This Brightsight White Paper detail a pragmatic way to secure 'simple' IoT-devices, while still keeping it meaningful. The author Dirk-Jan Out (CEO of Brightsight) is an internationally aclaimed security expert with in-dept...
27.02.2018 03:01 PM
Read more

Common Criteria Guidance for Developers, Evaluation Assurance Level 4, v1.44

A comprehensive guide for the developers who are interested in having their products evaluated and certified using Common Criteria methodology. We welcome comments and discussions with our experts on the topics, please feel free to contact us: info@brightsight.com
26.10.2017 09:05 AM
Read more

ICCC 16 2015 - Site audit results re-use - Peter van Swieten

06.11.2015 03:56 PM
Read more

ISCI - WG1 the updated ETR COMP template and methodology - Monique Bakker

06.11.2015 03:55 PM
Read more

The advantage of Using TOE Type Specific Assurance Methodology (cn)

This is a presentation that was given at the 14th International Common Criteria Conference (ICCC). The topics discussed in the presentation are:
  • Common Criteria and the difference with CAS/PCI
  • Experiences gained with the EU pilot performed with this "multiple-assurance within one TOE type...
04.09.2015 04:49 PM
Read more

The advantage of Using TOE Type Specific Assurance Methodology

This is a presentation that was given at the 14th International Common Criteria Conference (ICCC). The topics discussed in the presentation are:
  • Common Criteria and the difference with CAS/PCI
  • Experiences gained with the EU pilot performed with this "multiple-assurance within one TOE type" m...
03.09.2014 01:54 PM
Read more

Enhancing the Well-Defined and Successful ETR for Composition Approach

This is a presentation that was given at the 14th International Common Criteria Conference (ICCC). The topics discussed in the presentation are:
  • the role of ETR for composition in a composite evaluation
  • what should be in the ETR for composition
We welcome comments and discussions with our experts on th...
26.08.2014 10:52 AM
Read more