The Trusted Computer Security Evaluation Criteria (TBSEC) provides

A.
a basis for assessing the effectiveness of security controls built into automatic data-processing
system products

B.
a system analysis and penetration technique where specifications and document for the system
are analyzed.

C.
a formal static transition model of computer security policy that describes a set of access control
rules.

D.
a means of restricting access to objects based on the identity of subjects and groups to which they
belong.

Explanation:
TBSEC provides guidelines to be used with evaluating a security product. The TBSEC guidelines
address basic security functionality and allow evaluators to measure and rate the functionality of a
system and how trustworthy it is. Functionality and assurance are combined and not separated, as in
criteria developed later. TCSEC guidelines can be used for evaluating vendor products or by vendors
to design necessary functionality into new products. CISSP Study Guide by Tittel pg. 413.