1. Code of Practice, PD 0003,1993
2. Secure Information Processing versus the Concept of Product Evaluation;ECMA TR/64,1993
3. Lecture Notes on Evaluation Criteria;Gollmann,1996
4. Promoting Computer Security through Positive Computer Audit;Hardy,1995