"'Recall that criteria creep' is the process of refining evaluation requirements as the industry gains experience with them, making the evaluation criteria something of a moving target. (See Section 21.2.4.2.)
This issue is not confined to the TCSEC, but rather is a problem universal to all evaluation technologies" (Bishop, 2003, pp. 609 - 610).
With this in mind address the following requirements:
a. Analyze the benefits and drawbacks of the Common Criteria (CC) methodology for handling criteria creep.
b. Provide recommendations for ensuring that the benefits can be realized; and for mitigating the drawbacks.