Editing Evaluation Assurance Level (section)

=== EAL2: Structurally tested<span class="anchor" id="EAL2"></span> ===

EAL2 requires the cooperation of the developer in terms of the delivery of design
information and test results, but should not demand more effort on the part of the
developer than is consistent with good commercial practice. As such it should not
require a substantially increased investment of cost or time.
EAL2 is therefore applicable in those circumstances where developers or users require a
low to moderate level of independently assured security in the absence of ready
availability of the complete development record. Such a situation may arise when
securing legacy systems.