The NIT has issued a technical decision for Redundant assurance activities associated with FAU_GEN.1

The NIT acknowledges the issue described in the 'Issue' section. The following changes shall be applied. The first paragraph of the requirements on Guidance Documentation for FAU_GEN.1

" The evaluator shall check the guidance documentation and ensure that it lists all of the auditable events and provides a format for audit records. Each audit record format type must be covered, along with a brief description of each field. The evaluator shall check to make sure that every audit event type mandated by the cPP is described and that the description of the fields contains the information required in FAU_GEN1.2, and the additional information specified in the table of audit events."

shall be replaced by

"The evaluator shall check the guidance documentation and ensure that it provides an example of each auditable event required by FAU_GEN.1 (i.e. at least one instance of each auditable event – comprising the mandatory, optional and selection-based SFR sections as applicable – shall be provided from the actual audit record)."

For further information, please see the NIT interpretation at: https://www.niap-ccevs.org/Documents_and_Guidance/ccevs/NITDecisionRfI201727rev2.pdf

See issue description