PD-0035: Can the lists of Audit Events and Audit Information be Combined into a single Table?

This decision represents a long-term technical decision based on an OD, and may not be the same as the final results of the source OD. With respect to published criteria documentation and scheme documents, it provides suggested guidance on evaluation direction, but is not authoritative. Authoritative decisions are provided through the published criteria documents and published scheme and international interpretations thereof. With respect to published PPs, PDs are authoritative corrections to the PP, based on input from the PP author (if available), that are in force until the publication of the next revision of that PP.

Issue

Can the list of required auditable events (FAU_GEN.1.1) be combined with the information to be recorded for each event (FAU_GEN.1.2) into a single table (where each row shows both the audit event and the information recorded about that event)?

Resolution

Yes. This format has some advantages, since it unambiguously correlates the event-specific information with the listed events (facilitating checks of compliance against the PP requirements and minimizing the risk of error due to oversight or misinterpretation). Note that if the ST or PP includes FAU_SAR.1, its list of audit information must be consistent with this FAU_GEN table.

Support

Neither the CC nor the CEM dictates the presentation of a PP or ST. They do dictate content properties that must be be shown to be evident for each (and every) PP to be considered valid; CC part 1 B.2.1 explicitly states that a PP ``shall'‘ conform to the content requirements of CC part 1 annex B. Whether the information is in two separate lists or is presented in a single table is irrelevant.

Modification History:

2004-08-12

Updated effective date to reflect the date the PD was issued. (August 2004 NIB 6.c.xiv)

References:

• CAPPv1.a

Related NIs:

• None

Related CCIMB-INTERPs:

• None

Source OD: 0044