I-0474: Do ACM And ALC Apply To The TOE Or The TSF?

TYPE:                 NIAP Interpretation
NUMBER:               I-0474
STATUS:               Pending on: ALC/ADO/AGD Rewrite
REASON:               Hold - Pending ADO/AGD/ALC Rewrite

TITLE:                Do ACM And ALC Apply To The TOE Or The TSF?

SOURCE REFERENCE:     CC v2.1 Part 3 Clause 12 ALC
                      CC v2.1 Part 3 Clause 8 ACM
RELATED TO:           <None>

ISSUE:

Most of the components in Part 3 refer to providing assurances about the TSF. However, both ACM and ALC talk about the TOE, which includes unevaluated, possibly 3rd party, items. Must configuration management and life cycle controls apply to the entire TOE, or is it sufficient to control only the TSF portion of the TOE.

STATEMENT

To Be Determined

SUPPORT:

This corrects the problem identified in the issue statement.