Providing users with suitable services of information security engineering cloud based on ISO/IEC 15408

Information security engineering cloud (ISEC) should provide a wide range of services for its users to ensure the whole security of their target information/software systems. ISO/IEC 15408, as one of the most important international standards, plays an important role to ensure whole security of target information/software systems, and therefore, has been adopted as the core standard in ISEC. There are various services provided by ISEC based on ISO/IEC 15408. As a result, it is difficult for the users to find suitable services. However, there is no analysis about how to support users to find suitable services according to their roles and tasks. This paper identifies, classifies, and combines all services of ISEC based on ISO/IEC 15408. According to our analysis results and using supporting tools we are developing, ISEC based on ISO/IEC 15408 can provide efficient and satisfactory services to its users.