Description

This article is from the Computer Security Evaluation FAQ, by Trusted Product Evaluation Program TPEP@dockmaster.ncsc.mil.

52 Why should I buy a B2/B3/A1 product over a C2/B1 product? (Computer Security Evaluation)

While the features and assurances of each class increase, the
increase is not linear. B1 and below rated products provide a
basic set of security features and an independent assesment that
those features are implemented correctly. At B2 and above there
is significantly more effort and analysis both in development and
in evaluation that the features are correctly implemented. The
additional development effort often translates into increased cost
for the product. For applications involving sensitive data, the
added cost may be well worth the added protection.

Continue to:

• prev: 51 What should I do if evaluated Product X appears to fail a requirement? (Computer Security Evaluation)
• Index
• next: 53 Is there an approved program to declassify my hard drive? (Computer Security Evaluation)