Labgram #101/Valgram #121 - NIAP Policy Enforcement for Evaluations Against cPPs
Validators and CCTLs,
As the number of NIAP evaluations against collaborative PPs (cPPs) increases, it is important that CCTLs have a clear understanding of how cPP technical questions are addressed. Regardless of whether compliance to a cPP or a NIAP PP is claimed, all evaluations conducted in NIAP must adhere to NIAP policies.
For technical issues during any evaluation, labs must work with their validators and if necessary, submit questions to the appropriate NIAP TRRT.
NIAP TRRTs will provide cPP clarifications but will not issue a decision that adds, modifies, or deletes cPP SFRs or EAs.
Issues that necessitate a modification to a cPP will be submitted by NIAP to the appropriate iTC for resolution. The timeframe for an iTC to resolve issues is out of NIAP control, so CCTLs are encouraged to submit technical issues as early as possible in an evaluation or during pre-evaluation.
NIAP encourages all CCTLs to participate in iTCs in order to influence cPP development, which may result in fewer technical issues during evaluations.