DIN EN 17927:2024-03

This document describes a cybersecurity evaluation methodology, named SESIP, for components of connected ICT products. Security claims in SESIP are made based on the security services offered by those components. Components can be in hardware and software. SESIP aims to support comparability between and reuse of independent security evaluations. SESIP provides a common set of requirements for the security functionality of components which apply to the foundational components of devices that are not application specific. The methodology describes the re-use of evaluation results. The responsible national standardization committee is Working Group NA 043-04-27-03 AK "Evaluationskriterien für IT-Sicherheit" (Security Evaluation, Testing and Specification) at DIN Standards Committee Information Technology and IT Applications (NIA).