Very often in the world of check list-based decision making, subtlety is lost. The EAL evaluations of Windows Server and SuSE are great examples. Both are evaluated at EAL4+, so advantage: neither right?
Not so fast. Have a look at this:
Bottom line: more workloads are evaluated at EAL4+ under Windows.
Jeff Jones illustrates it well in a post here, nice chart, Jeff!
Jeff correctly points out that evaluating these extra workloads takes time, money and resources. It shows our commitment to meeting government security standards, and is the result of a lot of hard work from Redmond, and the Microsoft Federal technical team.