The Information Technology Security Evaluation Criteria (ITSEC) was written to address which of the
following that the Orange Book did not address?

A.
integrity and confidentiality

B.
confidentiality and availability

C.
integrity and availability

D.
none of the above

Explanation:
“ITSECTCSEC (Orange Book)
E0D
F1+E1C1
F2+E2C2
F3+E3B1
F4+E4B2
F5+E5B3
F5+E6A1
F6=Systems that provide high integrity
F7=Systems that provide high availability
F8=Systems that provide data integrity during communication
F9=Systems that provide high confidentiality
F10=Networks with high demands on confidentiality and integrity”
Pg. 230 Shon Harris: All-in-One CISSP Certification