Is it true that there are no longer any AMA (assurance maintenance) requirements at the international or US level? They seem to have been completely removed from v2.2 of CC Part 3 and I can no longer find CCIMB-2003-02-001 (Supplement: AMA) anywhere.
We now seem to be left with CCIMB-2004-02-009 ("Assurance Continuity: CCRA Requirements)?? This document seems to contain much less on the detailed nuts-and-bolts than the presumably defunct documents mentioned above. And there are a couple of profiles I see that seem to include some of the old AMA requirements.
The Assurance Continuity document indicates that a national scheme can have additional requirements, but I haven't seen any.
Does the US scheme envision that AMA-type requirements would be any different at EAL5 than at lower EALs?
DigitalNet Government Solutions, LLC
2525 Network Place MS/460-A, Herndon, VA 20171