600.436 High-Assurance Systems
Fall 01/Operational Assurance
23
Examination of Guidance
¨The developer shall
provide guidance documentation that
shall:
– identify all possible modes of
operation of the TOE (including operation
following failure or operational error), their
consequences and implications for maintaining
secure operation
–be complete, clear,
consistent and reasonable
–list all assumptions
about the intended environment
–list all requirements for external security measures (including external procedural, physical and personnel controls)