Email Record: Using the Common Criteria for IT security evaluation /