An implementation-independent set of security requirements for a family or category of targets of evaluation (TOEs) that meet specified consumer needs.