The IT Law Wiki
Advertisement

Overview[]

Trusted Computer System Evaluation Criteria (TCSEC) (referred to as the Orange Book) was a U.S. Department of Defense (DoD) standard that set basic requirements for assessing the effectiveness of computer security controls built into a computer system. The TCSEC was used to evaluate, classify and select computer systems being considered for the processing, storage and retrieval of sensitive or classified information.

The Orange Book was the centerpiece of the DoD Rainbow Series publications. Initially issued in 1983 by the National Computer Security Center (NCSC), an arm of the National Security Agency, and then updated in 1985, TCSEC was replaced by the Common Criteria international standard originally published in 2005.

See also[]

Advertisement