600.436 High-Assurance
Systems
Fall 01/Protection Profiles
Fully Defined External Interfaces
¨“describe the purpose and method of
use of all external TSF interfaces, providing complete details of all effects, exceptions, and error
messages, as appropriate”
¨“include rationale that TSF is
completely represented”