How is the claim that a PP is appropriate for a given robustness level verified?
A PP is a set of user defined requirements for use in a certain environment that must adhere to organizational policies. The author of the PP in concert with the users of the products that will claim compliance to that PP will determine the given robustness. There is also a PP Review Board that ensures that every PP with a Robustness Level adheres to the rules set forth in the Consistency Instruction Manuals (CIM). It also ensures the minimal functional requirements in the CIM have been addressed by the author of the PP. It should be noted that some early PPs were created before the definitions of Robustness levels were completely codified or the Consistency Instruction Manuals were written; consequently, some are called “Medium Robustness” despite being only EAL2 assurance. These are denoted as such on the list of Validated PPs.
Related Questions
- What initiatives/changes are likely to occur with GCSE and AS/A- Level given that KS3 is only part of what happens in schools? What is coming next?
- What level of detail will be required as medical justification on the attachment to the claim for treatment of the child and the family therapy?
- Can a TOE/ST claim a robustness level without conforming to a PP?
