A protection profile defines a set of security objectives and requirements for a category of products that covers the security requirements common to several users.
These objectives and requirements are independent of the implementation. Protection profiles are reusable and generally public.
The protection profile concept makes it possible to develop functional standards and provides assistance with the formulation of the specification document for a product.
Protection profiles can be certified according to the procedure CPP-P-01. The certification of protection profiles guarantees their compliance with the requirements defined in the Common Criteria.