PD-0014: Necessity For A Test Plan to Specifically Satisfy The Requirements for ATE_FUN.1.2C

This decision represents a long-term technical decision based on an OD, and may not be the same as the final results of the source OD. With respect to published criteria documentation and scheme documents, it provides suggested guidance on evaluation direction, but is not authoritative. Authoritative decisions are provided through the published criteria documents and published scheme and international interpretations thereof. With respect to published PPs, PDs are authoritative corrections to the PP, based on input from the PP author (if available), that are in force until the publication of the next revision of that PP.

Issue

A developer has brought in for evaluation a pre-existing product, one where the functional test documents were not developed to specifically meet the content and presentation of evidence elements for ATE_FUN.1. Although the developer performed functional tests of all security functions, the test documentation does not include a test plan to specifically satisfy the requirements for ATE_FUN.1.2C. Is this acceptable?

Resolution

The fact that a product was pre-existing does not create an exemption from the requirements. A test plan must be developed, and the content and presentation requirements must be met. This plan must be developed by the developer or sponsor; it cannot be developed by the CCTL as that would be a conflict of interest.

Modification History:

2004-08-12

Updated effective date to reflect the date the PD was issued. (August 2004 NIB 6.c.xiv)

References:

• CC v2.1 p3 ATE

Related NIs:

• None

Related CCIMB-INTERPs:

• None

Source OD: 0078