Examination of Guidance
¨ The developer shall provide guidance
documentation that shall:
 identify all possible modes of operation of the TOE
(including operation following failure or operational
error), their consequences and implications for
maintaining secure operation
be complete, clear, consistent and reasonable
list all assumptions about the intended environment
list all requirements for external security measures
(including external procedural, physical and personnel
controls)
600.436 High-Assurance Systems
Fall 01/Operational Assurance
23