12. Security Certification and Standards 12-1. ISO15408/IEEE2600.2™ The product has acquired ISO/IEC 15408 certification for compliance with IEEE Std. 2600.2™-2009*, an international standard for information security. IEEE Std. 2600.2™ IEEE Std. 2600.2 TM is an international standard that specifies information security criteria for MFPs. MFP security can be comprehensively strengthened by providing standard- compliant security functionalities, such as user identification and authentication, access control, data overwrite, network protection, security management, self-test, and audit logs.
ISO/IEC 15408 ISO/IEC 15408, also called Common Criteria (CC), is an international standard for the independent and objective evaluation of security measures in IT products and systems to determine whether those measures are properly designed and implemented. Specified versions of firmware, manuals, and other components are evaluated for ISO/IEC 15408 certification. The version of the firmware in a purchased product may differ from the certified version. There may be some limitations on product functionality when using a certified version.
The CCRA certification logo shows that the product was evaluated and certified in accordance with the Japan Information Technology Security Evaluation and Certification Scheme (JISEC). It does not imply a guarantee that the product is completely free from vulnerability. It also does not imply that the product is equipped with all necessary security functions under every operational environment. * U.S. Government Approved Protection Profile - U.S. Government Protection Profile for Hardcopy Devices Version 1.0 (IEEE Std. 2600.2 TM -2009) - 30 -