600.436 High-Assurance Systems
Fall 01/Development Process Assurance
44
Sampling of
Security Impact Analysis
–for each change which results in a modification of
the implementation representation of
the TSF or the IT environment, identify
the test evidence that shows, to the required
level of assurance, that the TSF continues to be correctly implemented following the change
–for each applicable assurance requirement in the
configuration management (Class ACM
Configuration management), life cycle
support (Class ALC Life cycle support), delivery and operation (Class ADO Delivery and operation) and
guidance documents (Class AGD
Guidance documents) assurance classes,
identify any evaluation deliverables that have changed, and provide a brief description of each change and
its impact on assurance
–for each applicable assurance requirement in the
vulnerability assessment (Class AVA
Vulnerability assessment) assurance class,
identify which evaluation deliverables have changed and which have not, and give reasons for the decision
taken as to whether or not to
update the deliverable