Date: | 02/16/2001 |
Subject: | Aspects of objectives in TOE and environment |
CC Part #1 Reference: | |
CC Part #2 Reference: | |
CC Part #3 Reference: | |
CEM Reference: | CEM, Section 3.4.5 (APE_REQ.1) CEM, Section 4.4.6 (ASE_REQ.1) |
For APE_REQ.1.13C and ASE_REQ.1.12C, the CEM uses different wording for similar work units for the TOE and for the environment.
Interpret work unit APE_REQ.1-20 and ASE_REQ.1-20 to include: "are suitable to meet that security objective for the TOE.".
The CEM work units APE_REQ.1-20 and ASE_REQ.1-20 are changed to:
The evaluator shall examine the security requirements rationale to determine that for each security objective for the TOE it contains an appropriate justification that the TOE security requirements are suitable to meet that security objective for the TOE.Rationale
It should be clear that the TOE security requirements are suitable to meet security objectives for the TOE. This work unit as currently worded says "suitable to meet that security objective" where "that security objective" refers to "each security objective for the TOE". The interpretation is made so that the work units are not ambiguous and are consistent with other work units.