Today information is considered as an asset just like capital either it is related to a personal or corporate. Global sharing and information losses enforce organizations to think about their information security management. Increasing security needs of military industry, defense associated organizations, Telecommunication and personal credential privacy requirements call for standardization. Common Criteria (CC) is one of the well know IT security assurance standard that is serving for this purpose and setting assurance levels. CC not only emphasizes the customer IT security requirements...