IT security evaluation criteria were approved as an international standard
(ISO/IEC 15408) in June, 1999. With standardization, IT security evaluation
technologies, managed mainly for military and governmental procurement in
the US and Europe by individual countries, will be used targeting commercia
l systems. ISO 15408 is attracting much attention as an international stand
ard following the ISO 9000 series.