This version of the Common Criteria for Information Technology Security Evaluation (CC ) is the first major revision since being published as CC in 2005. CC aims to: eliminate redundant evaluation activities; reduce/eliminate activities that contribute little to the final assurance of a product; clarify CC terminology to reduce misunderstanding; restructure and refocus the evaluation activities to those areas where security assurance is gained; and add new CC requirements if needed