(title available in French only)
Official
Note
Common Criteria scheme document (version 1.2) listing the issues identified in CC:2022 and CEM:2022 (revision 1) and proposing corrections or interpretations.
The full text is not reproduced here (copyright): see the official source.
Summary
Purpose
Document CCMB-2025-001, Errata and Interpretation for CC:2022 (Release 1) and CEM:2022 (Release 1), version 1.2 of 15 October 2025, brings together the corrections and interpretations of the Common Criteria CC:2022 and of the evaluation methodology CEM:2022. It is maintained by the Common Criteria Maintenance Board (CCMB) and approved by the CCDB CCMB-2025-001 v1.2.
Objective of the present document is to collect issues of different type that were identified for CC:2022 (Release 1), Parts 1 to 5 and CEM:2022 (Release 1) and to provide appropriate solutions as proposed corrections or interpretations, respectively.
The issues dealt with range from technical errors to inconsistencies, omissions and formatting defects; they may also concern the application of the documents CCMB-2025-001 v1.2, Introduction ~~Cd~~.
Who it applies to
The document concerns CC:2022 and CEM:2022. It also serves to prepare their next revision; it presents itself as a “living document”, supplemented over time CCMB-2025-001 v1.2, Introduction ~~Cd~~.
No act in the corpus, consulted on 30-10-2026, cites this document. Annex I to Implementing Regulation 2024/482 cites a different document, entitled “ADV_SPM.1 interpretation for CC:2022 transition” Annex I. The eIDAS implementing regulations refer to the Common Criteria “version CC:2022, Parts 1 through 5” or to standard ISO/IEC 15408, without mentioning any errata Annex; Implementing Regulation 2024/482 (EUCC) defines the Common Criteria and the common evaluation methodology without mentioning them either Art. 2(1) Art. 2(2). The summary of Part 1 details the references made by the acts CC:2022 R1 Part 1.
Key points
- A status for each resolution. Each resolution carries a status: mandatory application (“ma”), recommended (“re”) or question still open (“op”) CCMB-2025-001 v1.2, Introduction ~~Cd~~ CCMB-2025-001 v1.2, Terms and Definitions.
- Also valid for the ISO version. The document states that there is no difference in content between CC:2022 and CEM:2022 and the ISO/IEC 15408:2022 series and standard ISO/IEC 18045:2022; its resolutions therefore also apply to the ISO version, unless stated otherwise CCMB-2025-001 v1.2, Introduction ~~Cd~~.
- One section per document, from Part 1 to Part 5 and for the CEM CCMB-2025-001 v1.2. For Part 4, the section reports no correction CCMB-2025-001 v1.2, Errata / Interpretation for CC:2022 Part 4.
- Corrections of substance as well as of form. For example, the definition of extended security requirement is extended to the assurance components of Part 3, and no longer covers only the functional components of Part 2 CCMB-2025-001 v1.2, Errata / Interpretation for CC:2022 Part 1.
Links
- Documents corrected: Common Criteria CC:2022, Parts 1 to 5 CC:2022 R1 Part 1 CC:2022 R1 Part 2 CC:2022 R1 Part 3 CC:2022 R1 Part 4 CC:2022 R1 Part 5, and CEM:2022 CEM:2022 R1.
- CCRA transition policy CCMC-2023-04-001.
- Learning path: step 5, certification and standards.
Cited version
According to our fact sheet, drawn up on 29-10-2026, the ISO editions in force of ISO/IEC 15408 and 18045 are those of 2026, and the 2022 editions are withdrawn § 1. Identification.
Consolidation without official value
This summary cites the consolidated version, published on EUR-Lex, of Implementing Regulation 2024/482 Implementing Regulation (EU) 2024/482 — consolidated version of 29/12/2025. It serves as documentation: only the text published in the Official Journal is authentic.
Written by Asphalia.