I-0402: Identification Of The Certified Version

TYPE:                 NIAP Interpretation
NUMBER:               I-0402
STATUS:               Withdrawn
REASON:               OBE, given the reworking of assurance maintenance

TITLE:                Identification Of The Certified Version

SOURCE REFERENCE:     CC v2.1 Part 3 Subclause 16.1 AMA_AMP
RELATED TO:           <None>

ISSUE:

Referencing the evaluation results is implicit in identifying the certified version. There are also timing issues. (cleanup)

STATEMENT

The following interprets the AMA_AMP.1.2C element:

AMA_AMP.1.2C The AM Plan shall identify the certified version of the TOE, and shall reference the evaluation results.

Referencing the evaluation results are implicit in identifying the certified version.

RECOMMENDED CRITERIA CHANGES

To address this interpretation, the following changes should be made to the AMA_AMP class:

The AMA_AMP.1.2C component should be reworded as follows:
AMA_AMP.1.2C The AM Plan shall identify the certified version of the TOE~~, and shall reference the evaluation results~~.

Additionally, the CEM should address the issue of identifying the certified version of the TOE. Ideally, the CEM should note that the initial version of the AMA plan should have a placeholder for the certified version; this will be filled in when evaluation completes. It should also noted that the identification of the maintained version should be added for each certificate maintenance cycle.

SUPPORT:

This corrects the problem identified in the issue statement.