600.436 High-Assurance Systems
Fall 01/Development Process Assurance
21
Sufficiency
of Security Measures
¨The developer shall
produce development security documentation
that shall
–describe all the physical, procedural, personnel, and other security measures that are necessary to protect
the confidentiality and integrity of the
TOE design and implementation in its
development environment
–provide evidence that these security measures are followed during the development and maintenance of the TOE
•the evidence shall justify that the security measures provide the necessary level of protection to
maintain the confidentiality
and integrity of the TOE