This National Standard of Canada is equivalent to International Standard ISO/IEC 15408-2:2008. 1 Scope This part of ISO/IEC 15408 defines the required structure and content of security functional components for the purpose of security evaluation. It includes a catalogue of functional components that will meet the common security functionality requirements of many IT products.