Security Target
Define the evaluation target, environment, threats, objectives and functional claims.
Security & cloud
Define the product boundary and assurance claims
CC evaluates product security functions and assurance requirements for a specific version and target of evaluation. It differs from an organizational management system assessment.
Source record updated:
Discuss your certification →Scope and applicability
Information security product evaluation and certification
Developers may apply voluntarily. Korean public procurement requirements can specify CC or another route by product type; they do not apply identically to all software.
Korean certification schemes and international standards are different. A translated guide does not extend a Korean certificate to other countries. Confirm the target market, product classification and current requirements with the relevant body.
Who this is for
- Security product vendors entering public procurement
- Manufacturers choosing domestic or international evaluation
- Teams assessing changes to evaluated products
Documents to prepare
Design and assurance evidence
Document interfaces, implementation, configuration, delivery and development environment.
Testing and operational guidance
Provide product tests, user guidance and vulnerability analysis materials.
Preparation process
Choose product route and assurance
Check procurement requirements, domestic or international route and assurance level.
Agree laboratory scope
Discuss complexity, submission readiness, duration and fees.
Evaluate and certify
Correct product and document findings before the certification body's review.
Timing
Assurance level, complexity and product and document readiness drive duration. Include report review and issuance after evaluation.
Agency fees
Evaluation and certification costs
Laboratory quotation; no separate certification secretariat fee
The absence of a separate certification fee does not eliminate testing and evaluation charges.
Sources and references ↗Document automation and management cost KRW 300,000 per month. Expert services and certification body testing or assessment fees are separate. Specify supports preparation; the relevant authority or certification body makes the final decision.
Pricing and certification costs →Optional expert consulting
Expert review and consulting are optional, separately scoped services. Choose support for Common Criteria (CC) Evaluation based on your team's readiness and the evidence or assessment preparation you need.
- Confirm institutional testing, assessment and registration fees separately in the contract.
- Development fixes, clinical studies where applicable, security equipment and infrastructure operations may require separate budgets.
- Confirm internal staffing, travel, translation, VAT, surveillance and renewal costs in the quotation.
Questions and answers
Can CC and ISMS replace each other?
No. Product security and organizational management systems have different purposes.
Does no certification fee mean no project costs?
No. Laboratory evaluation, evidence preparation, product fixes and optional consulting may incur costs.
Does certification survive product changes?
Confirm the impact and maintenance or reevaluation route with the evaluator.