Control Design For Common Criteria CC1–CC9