NIAP Interpretations
Interpretations and Evolution of the Criteria and Methodology
Technical Rapid Response Teams (TRRT) The TRRT process provides timely response to evaluation and protection profile (PP) technical issues raised throughout the course of an evaluation. NIAP assigns individuals from the validation community to TRRTs for each technology type. The goal of the TRRT is to respond to technical issues within two business days and provide an issue resolution statement. TRRT resolutions are final for that one particular evaluation only. Should an issue pertain to multiple evaluations and/or Protection Profiles (PPs), the TRRT will publicly issue a decision on the NIAP website. Previously 'Precedent Decisions,' Technical Decisions (TDs) offer clarification and interpretations of PP requirements and assurance activities. Evaluation Consistency Review (ECR) At the end of each evaluation, an ECR is held. The ECR team is comprised of members of the validation community and their purpose is twofold. Foremost, to ensure the long-term technical consistency of the evaluation and validation processes. Second, to to ensure the CCTL has adequately evaluated the product with particular focus on the proper execution of the assurance activities defined in the PP. Should the ECR team recognize the need for a PP update/clarification, the suggestion will be forwarded to the TRRT for resolution. More detailed information related to TRRTs and ECRs can be found in Annex D, Scheme Publication #3. |