PD-0074: Dealing with Errors in a PP

This decision represents a long-term technical decision based on an OD, and may not be the same as the final results of the source OD. With respect to published criteria documentation and scheme documents, it provides suggested guidance on evaluation direction, but is not authoritative. Authoritative decisions are provided through the published criteria documents and published scheme and international interpretations thereof. With respect to published PPs, PDs are authoritative corrections to the PP, based on input from the PP author (if available), that are in force until the publication of the next revision of that PP.

Issue

In reviewing an evaluated PP, it was discovered that there are errors in the PP that were not identified and corrected by the PP evaluation team. What's a poor ST evaluation team to do, when faced with a situation like this?

Resolution

When a problem is identified in a Protection Profile, the specifics of the problem should be captured in an OR, and submitted to CCEVS. CCEVS will, if possible, consult with the authors of the PP and/or the PP Review Board, to determine the original intent, and will issue a decision on how to interpret the problematic requirements in the context of the ST's evaluation. Long-term corrections will be addressed by either by issuing a new version of the PP, or by issuing an interpretation of the PP to be used until that PP is superseded.

Modification History:

2004-08-12

Updated effective date to reflect the date the PD was issued. (August 2004 NIB 6.c.xiv)

References:

• ALFWPPv1.d

Related NIs:

• None

Related CCIMB-INTERPs:

• None

Source OD: 0145