PD-0066: In FAU_SEL.1, What Is Meant By "the set of audited events"?

This decision represents a long-term technical decision based on an OD, and may not be the same as the final results of the source OD. With respect to published criteria documentation and scheme documents, it provides suggested guidance on evaluation direction, but is not authoritative. Authoritative decisions are provided through the published criteria documents and published scheme and international interpretations thereof. With respect to published PPs, PDs are authoritative corrections to the PP, based on input from the PP author (if available), that are in force until the publication of the next revision of that PP.

Issue

In FAU_SEL.1, can "the set of audited events" be interpreted to mean a subset of the auditable events defined in FAU_GEN.1? If a TSF can include or exclude only that subset, does the TOE meet the FAU_SEL.1 requirement?

Resolution

The FAU_SEL.1 requirement applies to all of the auditable events identified in FAU_GEN.1.

Support

The front matter of the FAU_SEL.1 component, as well as the related discussion in the Annex, make it clear that the intent of the FAU_SEL requirement is to apply to all events. The lack of the explicit term "all" is viewed only as an inconsistency of presentation with the other FAU requirements.

Modification History:

2004-08-12

Updated effective date to reflect the date the PD was issued. (August 2004 NIB 6.c.xiv)

References:

• CAPPv1.d
• CEM v1.0 Part 2 ASE_TSS.1-5

Related NIs:

• None

Related CCIMB-INTERPs:

• None

Source OD: 0184