Analysis & Testing for Insecure States
¨ No additional explicit developer
requirements
¨ Evaluator is required to perform
independent testing to verify that the
guidance documentation provides enough
information to identify insecure TOE
configurations
600.436 High-Assurance Systems
Fall 01/Operational Assurance
25