Common Criteria and answering the question 'Is it Safe'
...considerations
1) Value of protected assets
2) Assumptions about the sophistication of and level of resources available to an attacker. Defining attacker can cover a spectrum that ranges from a well intentioned but misguided employee to people we commonly think of as hackers to employees of a hostile intelligence service
3) Level of...
