COMMUNICATIONS SECURITY ESTABLISHMENT Certificate of Product Evaluation BeyondTrust Software, Inc. IT Risk Management Framework v6.0 Other Devices and Systems BeyondTrust Software, Inc. This is to certify that the named product has been evaluated under the terms and conditions of the Canadian Common Criteria Scheme and complies with the requirements for Common Criteria Recognition Agreement (CCRA). Conformance Claim: EAL 2+ (ALC_FLR.2) CC Evaluation Facility: DXC Security Testing and Certification Laboratories Date Issued: 8 May 2017 The IT product identified in this certificate has been evaluated at an approved evaluation facility established under the Canadian Common Criteria Scheme using the Common Methodology for IT Security Evaluation, Version 3.1 Revision 4, for conformance to the Common Criteria for IT Security Evaluation, Version 3.1 Revision 4. This certificate applies only to the specific version and release of the product in its evaluated configuration and in conjunction with the complete certification report. The evaluation has been conducted in accordance with the provisions of the Canadian Common Criteria Scheme and the conclusions of the evaluation facility in the evaluation report are consistent with the evidence adduced. This certificate is not an endorsement of the IT product by CSE or by any other organization that recognizes or gives effect to this certificate, and no warranty of the IT product by CSE or by any other organization that recognizes or gives effect to this certificate, is expressed or implied. ORIGINAL SIGNED 383-4-412 Manager COTS Assurance Programs