Thank you to the ODRB for considering this matter; I know how busy you all are. Please see my note below.
Michelle Ruppel
Saffire Systems
-----Original Message-----
From: cc-cmt@nist.gov [mailto:cc-cmt@nist.gov] On Behalf Of Observation Decisions Review Board
Sent: Tuesday, April 08, 2008 1:28 PM
To: Multiple recipients of list
Subject: Re: Clarification/Correction on CC v3.1 ADV_TDS.3
The ODRB discussed Michelle's questions and observations on ADV_TSD.3.8C
at its February meeting.
The ODRB agrees with Michelle that all interfaces should be cataloged,
if not described. Interfaces that are SFR non-interfering and
SFR-supporting would be listed as such, including which other interfaces
they are calling (ADV_TDS.3.9C). This assists evaluators with
determining TSFI and the TOE boundary. SFR-enforcing interfaces are
described in detail, as required in ADV_TDS.3.8C.
Regarding the question of a requirement to examine all SFR-enforcing
module descriptions to ensure that they include called interfaces to
other modules, ADV_TDS.3.8C requires this: "...interaction with and
called interfaces to other modules." CEM v3.1r2 paragraphs 821-823
provide several examples that may be helpful.
Michelle: Note: In the CEM, paragraphs 821-823 are under ADV_TDS.3.9C, specifically ADV_TDS.3-10.