If a PP is shown to be flawed, can an ST claim compliance with the PP by adhering to the approved flaw remediation?
Yes. Once the intent of the PP author has been determined (either from the author or by the Chief Validator making an educated decision), the resulting PD serves as an update to the PP. Compliance is claimed against the PP with these PDs (virtually) incorporated: in the introductory part of the ST where the PP is cited, the PDs are also listed.
Related Questions
- Can users claim audit independence and separation of function by using Congruity Inspector for compliance preparation and self-auditing?
- Can an evaluated TOE later claim compliance to PP (such as when the PP comes out after the TOE evaluation has completed?)
- Can a TOE/ST claim a robustness level without conforming to a PP?
