NIB responses to cc-cmt questions

["Daniel P. Faigin" <faigin@solarium.aero.org>]

On Fri, 8 Feb 2002 08:56:39 -0800, James Arnold <James.L.Arnold.Jr@saic.com>
said: 

> The NIB has recently provided "opinions" for a number of questions posted on
> the cc-cmt forum in the November 2001 timeframe. It is interesting to note
> that these same questions were posted on the www.commoncriteria.org General
> Common Criteria Discussions (GCCD) forum over a year before that (and
> perhaps someone will copy these responses over to the forum).

I recall that the IWG felt it was inapprorpriate to respond on
commoncriteria.org in the general discussion forum, as that is not a "US"
system but part of the CCIMB scope of authority. Similarly, it would be
inappropriate for the NIB responses to be moved to that forum (at least by the
NIB).

As for the length of time for the response: the previous NIB (and its
predecessor body, the IWG) meetings were in early November 2001 and then early
January, so we commented on the posted material at our next meeting after the
posting. Our next meeting is the week of March 4th, 2002.

> Regardless, I appreciate that the NIB has taken the time to respond (despite
> the subsequent comments I will provide). However, I am disappointed that
> very few in the community are apparently interested in contributing to
> either this or the GCCD forum.

I concur. I miss the old "give and take" of Dockmaster and its forums, and
encourage people to participate. I know that we have been trying to obtain
public comments on draft interpretations, usually with nary a whisper (which,
although I may disagree with some of your comments, I applaud you for at least
speaking up and making them... I wish more would do the same).

> Note that I had hoped that use of the GCCD
> forum might provide an opportunity to gain more broad, international
> insights and I am concerned that the NIB is being left to resolve issues
> independent of the bulk of CC-related experience and opinions.

I believe the CCIMB (which operates what you call the GCCD forum) has a
different goal than the NIB/IWG. The CCIMB's goal is primarily to serve its
sponsoring organizations by endeavouring to update and correct the CC. It
appears not to have the goal of answering questions and comments on
commoncriteria.org. The NIB, on the other hand (I believe this will be
captured in the charter, and was certainly in the IWG charter) has the goal
not only of developing interpretations applicable under CCEVS, but also to
help those with CC questions. Now, questions that arise in the context of an
evaluation should go through the evaluation channels (i.e., through the
evaluation team, then through the validator, and then to the OD process), but
there was no forum for questions from people not already in evaluation. The
NIB attempts to answer the latter questions when they are posted on the cc-cmt
mailing list.

I hope this helps explain things.

Daniel