Editing Evaluation Assurance Level (section)

=== EAL5: Semi-formally designed and tested<span class="anchor" id="EAL5"></span> ===

EAL5 permits a developer to gain maximum assurance from security engineering based
upon rigorous commercial development practices supported by moderate application of
specialist security engineering techniques. Such a TOE will probably be designed and
developed with the intent of achieving EAL5 assurance. It is likely that the additional
costs attributable to the EAL5 requirements, relative to rigorous development without
the application of specialized techniques, will not be large.
EAL5 is therefore applicable in those circumstances where developers or users require a
high level of independently assured security in a planned development and require a
rigorous development approach without incurring unreasonable costs attributable to
specialist security engineering techniques.

Numerous [[smart card]] devices have been evaluated at EAL5, as have multilevel secure devices such as the Tenix Interactive Link. [[XTS-400]] (STOP 6) is a general-purpose operating system which has been evaluated at EAL5 augmented.

[[LPAR]] on [[IBM System z]] is EAL5 Certified.<ref>[https://web.archive.org/web/20060423231416/http://www-03.ibm.com/systems/z/security/ccs_certification.html IBM System z Security]; [https://web.archive.org/web/20060512150638/http://www-03.ibm.com/systems/z/security/certification.html IBM System z partitioning achieves highest certification]</ref>