600.436 High-Assurance Systems
Fall 01/Development Process Assurance
8
Configuration
Management Capabilities
¨Goals of CM capabilities are to:
–ensure that the TOE is correct and complete before it is
sent to the consumer;
–ensure that no configuration items are missed during
evaluation;
–prevent unauthorised modification, addition, or deletion
of TOE configuration items
¨Five Components, levelled on capabilities, scope of CM documentation, and presence of developer justification
that CM system meets its security
requirements
–Version Numbers
–Configuration Items
–Authorization Controls
–Generation Support and Acceptance Procedures
–Advanced Support