An international framework for evaluating and certifying the security properties of IT products and components.