Does the common criteria paradigm have a future? [security and privacy]

In IEEE Security & Privacy´s July/August 2003 issue, the author discussed the then upcoming 4th International Common Criteria Conference, which was held in Stockholm in September. Reviewing the CD of the presentations, however, he is left with the strong impression that, while a good idea when promulgated five years ago (after five years´ effort by the six founding nations), the CC enterprise might have run out of gas. The proceedings´ record and the author´s own sampling of discussions on the CC Forum suggest the management structure and process need considerable revamping if the CC is to have a future.