NIAP Oversees Evaluations of Commercial IT Products for Use in National Security Systems

Short Name: pkg_flr_v1.0

Technology Type: Miscellaneous

CC Version: 3.1

Date: 2024.06.28

Conformance Claim: None

Assurance Package 

PP OVERVIEW

Ongoing security maintenance is critical to protecting products against novel attacks, vulnerable dependencies, and security flaws that may be introduced through feature enhancements or other product changes. The Common Criteria (CC) defines ALC_FLR, Flaw Remediation, specifically to ensure that the developer of a certified product has procedures put into place to ensure that potential flaws are diagnosed and addressed. ALC_FLR includes three hierarchically increasing levels (ALC_FLR.1 through ALC_FLR.3) that define flaw remediation procedures to an increasing level of rigor.

This assurance package is intended to serve as an optional extension to Protection Profiles (PPs) and PP-Configurations for certifying schemes that require flaw remediation procedures when exact conformance is required. CC validation schemes may require a conformant product include any level of ALC_FLR in its validation process to obtain sufficient assurance that product security is maintained on an ongoing basis.

This U.S. Government Approved Protection Profile is not assigned to any Validated Products

This U.S. Government Approved Protection Profile does not have any related Technical Decisions