How Do Organizations Seek Cyber Assurance? Investigations on the Adoption of the Common Criteria and Beyond

Cyber assurance, which is the ability to operate under onslaught of cyber attacks and other unexpected events, essential for organizations facing inundating security threats on a daily basis. Organizations usually employ multiple strategies conduct risk management achieve assurance. Utilizing cybersecurity standards certifications can provide guidance vendors design manufacture secure Information Communication Technology (ICT) products as well level assurance functionality consumers. Hence, employing an effective strategy In this work, we begin with investigating adoption by surveying 258 participants from across various countries sectors. Specifically, identify barriers Common Criteria through designed questionnaire. Taking into account seven identified barriers, show recommendations promoting certifications. Moreover, beyond certifications, shed light devised our participants, provides directions approaches enhancing in organizations.