BS PD CEN ISO/TS 17574:2017提供了安全要求的准备和评估指南 规范，在ISO/IEC 15408（所有部分）和 ISO/IEC TR 15446。通过保护配置文件（PP），它意味着一系列产品或系统的安全要求 满足特定需求。一个典型的例子是，将在以下系统中使用的车载设备（OBE）的PP: EFC系统。但是，如果已经提供了保护配置文件，则本文件中的指南将被取代 存在于考虑中的子系统中。EFC的评估目标（TOE）仅限于EFC特定的角色和接口，如所示 图1。由于现有的财务安全标准和准则适用于其他外部 角色和接口，假定它们不在EFC的TOE范围内。 交叉引用:ISO 14906:2011/Amd1:2015ISO 16609ISO 17573:2010ISO 17575-1ISO 17575-2ISO 17575-3ISO/IEC 9797-1ISO/IEC 9798-4ISO/IEC 10118ISO/IEC 15408-1:2009ISO/IEC 15408-2ISO/IEC 15408-3:2008 ISO/IEC TR 15446ISO/TS 19299:2015CEN/TS 16702-1CEN/TS 16702-2购买本文件时可提供的所有现行修订版。

BS PD CEN ISO/TS 17574:2017 provides guidelines for preparation and evaluation of security requirements specifications, referred to as Protection Profiles (PP) in ISO/IEC 15408 (all parts) and in ISO/IEC TR 15446.By Protection Profile (PP), it means a set of security requirements for a category of products or systems that meet specific needs. A typical example would be a PP for On-Board Equipment (OBE) to be used in an EFC system. However, the guidelines in this document are superseded if a Protection Profile already exists for the subsystem in consideration.The target of evaluation (TOE) for EFC is limited to EFC specific roles and interfaces as shown in Figure 1. Since the existing financial security standards and criteria are applicable to other external roles and interfaces, they are assumed to be outside the scope of TOE for EFC.Cross References:ISO 14906:2011/Amd1:2015ISO 16609ISO 17573:2010ISO 17575-1ISO 17575-2ISO 17575-3ISO/IEC 9797-1ISO/IEC 9798-4ISO/IEC 10118ISO/IEC 15408-1:2009ISO/IEC 15408-2ISO/IEC 15408-3:2008ISO/IEC TR 15446ISO/TS 19299:2015CEN/TS 16702-1CEN/TS 16702-2All current amendments available at time of purchase are included with the purchase of this document.