PD-0039: Can application notes contain requirements?

This decision represents a long-term technical decision based on an OD, and may not be the same as the final results of the source OD. With respect to published criteria documentation and scheme documents, it provides suggested guidance on evaluation direction, but is not authoritative. Authoritative decisions are provided through the published criteria documents and published scheme and international interpretations thereof. With respect to published PPs, PDs are authoritative corrections to the PP, based on input from the PP author (if available), that are in force until the publication of the next revision of that PP.

Issue

Can application notes contain requirements?

Resolution

No, an application note is informative. It provides interpretation or explanation of the requirements rather than specifying new requirements.

Support

CC part 1, Annex B, B.2.7 Application notes states "This optional part of the PP may contain additional supporting information that is considered relevant or useful for the construction, evaluation, or use of the TOE". NIAP Interpretation I-0421 states "Application notes in protection profiles are informative only". Since the application notes are not normative, evaluators may ignore them during the evaluation process. Ignoring the application notes that contain requirements may cause inconsistencies between remaining parts of the evaluated PP/ST and the application note.

Modification History:

2004-08-12

Updated effective date to reflect the date the PD was issued. (August 2004 NIB 6.c.xiv)

References:

• TFFWPPv1.c

Related NIs:

• I-0364: Application Notes In Protection Profiles Are Informative Only

Related CCIMB-INTERPs:

• None

Source OD: 0096