Types of TOE’s

Another piece of Common Criteria nomenclature in this section is the type of TOE. There are
three types of TOE’s:
1. Monolithic TOE – A self-contained, standalone TOE. This is a product or subsystem that
does not have any component TOE’s and is not part of a composite TOE.
2. Component TOE – The lowest level TOE in a system compromised of multiple TOE’s.
Two or more component TOE’s can be combined to form a composite TOE.
3. Composite TOE – A composite of multiple component and composite TOE’s that address
requirements for a system.
A field device can be a monolithic TOE and can be evaluated and certified on its own. A field
device can also be a component TOE that would be part of a composite TOE developed in the
future. This composite TOE could include a Field Device Protection Profile and a Control
Center Protection Profile.
Acronyms
DCS Distributed Control System
IED Intelligent Electronic Device
PAC Programmable Automation Controller
PLC Programmable Logic Controller
PP Protection Profile
RTU Remote Terminal Unit
Supervisory Control and Data Acquisition
SCADA
TOE Target of Evaluation
TSF TOE Security Functions