Structure of a Protection Profile

Updated 14 February 2024

Declaring a PP in XML

• PP Reference
• Revision History
• TDs Applied (optional)
• Included Packages
• Modules Reference
• PP Preferences
• Introduction
• • PP Overview
• • Terminology Sections
• • Use Cases Section (optional)
• • Package Usage Section (optional)
• • Platforms Declaration (optional)
• • Features Declaration (optional)
• • Other Introductory Sections
• Conformance Claims Section
• Security Problem Definition Section
• • Threats
• • Assumptions
• • Organizational Security Policies
• Security Objectives Section
• • Security Objectives for the TOE
• • Security Objectives for the Operational Environment
• • Security Objectives Rationale
• Security Requirements Section
• • Security Functional Requirements
• • • SFR Classes and Families
• • • Components
• • • Elements
• • • Audit Events
• • • Management Functions
• • Security Requirements Rationale
• • Security Assurance Requirements
• Appendix A.1: Optional Requirements
• Appendix A.2: Objective Requirements
• Appendix A.3: Implementation-dependent Requirements
• Appendix B: Selection-based Requirements
• Appendix C: Extended Component Definitions
• Appendix: Implicitly Satisfied Requirements
• Appendix: Entropy Documentation and Assessment
• Appendix: Equivalency Guidelines
• Appendix: Use Case Templates
• Appendix: Other appendixes as needed
• Appendix: Acronyms
• Appendix: Bibliography