[Public Interpretations Database]

I-0380: FPT_ITT, FPT_SSP, And FPT_TRC Should Be Incorporated Into FPT_SEP

 
TYPE:                 NIAP Interpretation
NUMBER:               I-0380
STATUS:               Pending on: ADV Rewrite
REASON:               Hold: Pending ADV Rewrite

TITLE:                FPT_ITT, FPT_SSP, And FPT_TRC Should Be Incorporated Into
                      FPT_SEP

SOURCE REFERENCE:     CC v2.1 Part 2 Clause 10
                      CC v2.1 Part 2 Subclause 10.11 FPT_SEP
                      CC v2.1 Part 2 Subclause 10.12 FPT_SSP
                      CC v2.1 Part 2 Subclause 10.15 FPT_TRC
                      CC v2.1 Part 2 Subclause 10.6 FPT_ITT
                      CC v2.1 Part 2 Subclause J.11 FPT_SEP
                      CC v2.1 Part 2 Subclause J.12 FPT_SSP
                      CC v2.1 Part 2 Subclause J.15 FPT_TRC
                      CC v2.1 Part 2 Subclause J.6 FPT_ITT
RELATED TO:           <None>

ISSUE:

Three of the current Part 2 families, FPT_ITT, FPT_SSC, and FPT_TRC all deal with protection of the TSF domain. This is really the same issue as FPT_SEP; these components should be incorporated into FPT_SEP.

STATEMENT

The following interprets FPT_ITT, FPT_SSP, and FPT_TRC in their relationship with FPT_SEP:

The Part 2 components FPT_ITT, FPT_SSP, and FPT_TRC should either be removed or incorporated into FPT_SEP, as the protections they provide are truly a subset of FPT_SEP.

RECOMMENDED CRITERIA CHANGES

TBD

SUPPORT:

This corrects the problem identified in the issue statement.