Analysis & Testing for Insecure States
¨
No additional explicit developer
requirements
¨
Evaluator is required to perform
independent testing to verify that the
guidance documentation provides enough
information to identify insecure TOE
configurations
600.436 High-Assurance Systems
Fall 01/Operational Assurance
25