cc-cmt question about IT Environment SFRs in PPs and STs
- Subject: cc-cmt question about IT Environment SFRs in PPs and STs
- From: Tom Benkart <teb@coact.com>
- Date: Fri, 23 Apr 2004 16:12:15 -0400
- Content-Type: text/plain; charset="us-ascii"; format=flowed
If a PP allocates SFRs to the IT Environment, is it permissible for STs to
satisfy one or more of those requirements in the TOE and still claim
conformance to the PP?
And (assuming it is), what is the appropriate way to specify those SFRs in
the ST:
(A) Leave the SFRs in the IT Environment (essentially, do not claim that
functionality in the TOE even though it is there)
(B) Move those SFRs to the TOE
If A, is it required that the TOE boundary be drawn such that the relevant
functionality is outside the TOE boundary? Do those SFRs have to be
addressed by the evaluation evidence since it remains allocated to the IT
Environment?
If B, do the corresponding IT Environment Objectives move to the TOE also
(since TOE SFRs have to be mapped to TOE Objectives)? What should be done
if an assumption was mapped to such an Objective in the PP? What happens
if multiple IT Environment SFRs are mapped to one IT Environment Objective
in the PP, and only some of those SFRs are satisfied by the TOE for a
specific ST?
Thanks.
Tom
Tom Benkart
Lab Manager
COACT, Inc.
9140 Guilford Road, Suite G
Columbia, MD. 21046
301-498-0150
Fax: 301-498-0855
teb@coact.com
Date Index |
Thread Index |
Problems or questions? Contact list-master@nist.gov