Australian Information Security Manual ISM-0280: If procuring an evaluated product, a product that has completed a PP-based evaluation, inc

If procuring an evaluated product, a product that has completed a PP-based evaluation, including against all applicable PP modules (as well as a software bill of materials assessment if applicable), is selected in preference to one that has completed an EAL-based evaluation.