Skip to content
Information SecurityInternational

Common Criteria CC:2022

What is Common Criteria CC:2022?

The Common Criteria's catalogue of security functional requirements for IT products, CC:2022: 74 functional families across security audit, communication, cryptography, user data protection, identification and authentication, security management, privacy, protection of the security functionality, resource use, access and trusted channels, with Part 1's evaluation model as the frame. It comprises 74 controls organised across 11 domains, and applies in International.

Map this against the frameworks you already hold

The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.

Browse the framework graph →

Where Common Criteria CC:2022 overlaps with the standards you already hold

What Common Criteria CC:2022 means in your sector

What Common Criteria CC:2022 means for your job

Questions people ask about Common Criteria CC:2022

What is Common Criteria CC:2022?
The Common Criteria's catalogue of security functional requirements for IT products, CC:2022: 74 functional families across security audit, communication, cryptography, user data protection, identification and authentication, security management, privacy, protection of the security functionality, resource use, access and trusted channels, with Part 1's evaluation model as the frame.
How many controls does Common Criteria CC:2022 have?
Common Criteria CC:2022 contains 74 controls organized across 11 domains.
Where does Common Criteria CC:2022 apply?
Common Criteria CC:2022 applies in International. Organizations operating in or serving customers in this jurisdiction should check whether its requirements reach them.
Which version of Common Criteria CC:2022 is covered here?
This page covers CC:2022 Revision 1 (November 2022), Parts 1 and 2.

Query Common Criteria CC:2022 programmatically

Common Criteria CC:2022, its 74 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.

Common Criteria CC:2022 API reference and MCP config →

How ready are you for Common Criteria CC:2022?

Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.

Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .