|
|
|
|
|
|
|
|
|
|
|
|
|
|
¨ |
The
developer shall provide guidance
|
|
|
|
documentation
that shall:
|
|
|
|
– |
identify all possible modes of operation
of the TOE
|
|
|
|
(including
operation following failure or operational
|
|
|
|
error),
their consequences and implications for
|
|
|
|
maintaining
secure operation
|
|
|
|
– |
be
complete, clear, consistent and reasonable
|
|
|
|
– |
list
all assumptions about the intended environment
|
|
|
|
– |
list
all requirements for external security measures
|
|
|
|
(including
external procedural, physical and personnel
|
|
|
controls)
|
|