PD-0038: Must Sublists In An SFR Be Numbered?

This decision represents a long-term technical decision based on an OD, and may not be the same as the final results of the source OD. With respect to published criteria documentation and scheme documents, it provides suggested guidance on evaluation direction, but is not authoritative. Authoritative decisions are provided through the published criteria documents and published scheme and international interpretations thereof. With respect to published PPs, PDs are authoritative corrections to the PP, based on input from the PP author (if available), that are in force until the publication of the next revision of that PP.

Issue

Could bullets be used in PPs or STs to enumerate the sublists within SFRs?

Resolution

Yes, PP and ST authors can use bullets to enumerate the sublists within SFRs to identify sub-requirements.

Support

Currently there is no specific enumeration method documented in either the CC or the CEM to uniquely identify sublist requirements. PP and ST authors can use bullets to enumerate the sublists within SFRs to identify sub-requirements, but this approach makes it difficult for evaluators to cross reference security requirements and security objectives.

Modification History:

2004-08-12

Updated effective date to reflect the date the PD was issued. (August 2004 NIB 6.c.xiv)

References:

• ALFWPPv1.c
• TFFWPPv1.c

Related NIs:

• None

Related CCIMB-INTERPs:

• None

Source OD: 0080