The Common Criteria appeared in 1996. The CC divide IT systems into 8 security ratings from EAL 0 (no security structure at all) to EAL 7 (formal design and test). In Germany the BSI (Federal Office for the Security of Information Technology) is responsible for certification under CCITSE.