The rationale behind the Canadian criteria

Version 3.0 of the CTCPEC was released in May of 1993. It represents the culmination of a five year effort to create the definitive information technology security criteria. This paper presents the rationale behind the CTCPEC: the why's and what-for's that are usually asked of the original team, but that are seldom written down, let alone in a single paper.<<ETX>>