PD-0080: Use of Unevaluated Hardware during Testing?

This decision represents a long-term technical decision based on an OD, and may not be the same as the final results of the source OD. With respect to published criteria documentation and scheme documents, it provides suggested guidance on evaluation direction, but is not authoritative. Authoritative decisions are provided through the published criteria documents and published scheme and international interpretations thereof. With respect to published PPs, PDs are authoritative corrections to the PP, based on input from the PP author (if available), that are in force until the publication of the next revision of that PP.

Issue

Can security functions allocated to the TOE, in particular, FDP_RIP.2, be tested using well-known components that are outside the TOE boundary?

Resolution

Testing of the satisfaction of a functional requirement should be through the TSFI. Hardware used as part of the underlying Abstract Machine must be verified to meet any conditional levied upon it by the Objectives for the IT Environment.

Modification History:

2004-08-12

Updated effective date to reflect the date the PD was issued. (August 2004 NIB 6.c.xiv)

References:

• None

Related NIs:

• None

Related CCIMB-INTERPs:

• None

Source OD: 0204