In a time when digital systems are used in almost every area of life, from communication and finance to education and administration, trust in information technology has become a practical necessity. Security is no longer only a technical topic for specialists. It is now a matter of governance, quality, risk control, and responsible management. This is why ISO/IEC 15408, widely known as Common Criteria for IT security evaluation, continues to hold importance in the profession