Knowledge Gateway
Unlock your learning potential with industry insights and standards that matter. Share your email to begin.
Unlock your learning potential with industry insights and standards that matter. Share your email to begin.
Status : Withdrawn
Standard Type : Main
Document Year : 2012
Pages : 17
Edition : 1
Section Volume : IT Security techniques (ISO/IEC JTC 1/SC 27.)
ISO/IEC TR 20004:2012 leverages the Common Weakness Enumeration (CWE) and the Common Attack Pattern Enumeration and Classification (CAPEC) to support the method of scoping and implementing ISO/IEC 18045:2008(E) vulnerability analysis activities.
ISO/IEC TR 20004:2012 does not define evaluator actions for certain high assurance ISO/IEC 15408 components, where there is as yet no generally agreed guidance.