Security Objectives Security Objectives for the Operational Environment The Operational Environment of the TOE implements technical and procedural measures to assist the TOE in correctly providing its security functionality. This part wise solution forms the security objectives for the Operational Environment and consists of a set of statements describing the goals that the Operational Environment should achieve. Note that these objectives supplement those that exist in the base-PP; both sets of objectives are expected to be satisfied by the Operational Environment defined in a conformant ST. (OE.SECURED_CONFIGURATION) The Management Server and remote endpoints are configured in accordance with its associated operational guidance so that the level of security that is provided by the TOE is consistent with its evaluated configuration. Rationale: The TSF may provide security mechanisms that require configuration to be performed after it has been installed. A trusted administrator will satisfy this objective by configuring the TOE in accordance with its operational guidance. The AA component of the TOE (i.e. one or more software instances that conforms to the may require environmental configuration prior to secure use. (OE.SECURED_ENVIRONMENT) The components of the Management underlying Server’s platform are configured in accordance with their associated operational guidance so that the TOE is deployed in an environment that is consistent with its evaluated configuration. Rationale: Administrators are trusted to follow the operational guidance that is provided for secure installation and configuration of the TOE, which includes any aspects of its underlying platform (such as an operating system, firewall, or database). (OE.PHYSICAL/SERVER) The Operational Environment will provide a secure physical computing space such than an adversary is not able to make modifications to the environment or to the TOE itself, which includes the Management Server. Rationale: The expected deployment of the TOE is in an enterprise computing environment. The Management Server can reasonably be expected to be deployed in a secured environment because it does not provide functionality that would necessitate its deployment in a high-risk public-facing environment.
Security Objectives Security Objectives for the Operational Environment The Operational Environment of the TOE implements technical and procedural measures to assist the TOE in correctly providing its security functionality. This part wise solution forms the security objectives for the Operational Environment and consists of a set of statements describing the goals that the Operational Environment should achieve. Note that these objectives supplement those that exist in the base-PP; both sets of objectives are expected to be satisfied by the Operational Environment defined in a conformant ST. (OE.SECURED_CONFIGURATION) The Management Server and remote endpoints are configured in accordance with its associated operational guidance so that the level of security that is provided by the TOE is consistent with its evaluated configuration. Rationale: The TSF may provide security mechanisms that require configuration to be performed after it has been installed. A trusted administrator will satisfy this objective by configuring the TOE in accordance with its operational guidance. The AA component of the TOE (i.e. one or more software instances that conforms to the may require environmental configuration prior to secure use. (OE.SECURED_ENVIRONMENT) The components of the Management Server’s underlying platform are configured in accordance with their associated operational guidance so that the TOE is deployed in an environment that is consistent with its evaluated configuration. Rationale: Administrators are trusted to follow the operational guidance that is provided for secure installation and configuration of the TOE, which includes any aspects of its underlying platform (such as an operating system, firewall, or database). (OE.PHYSICAL/SERVER) The Operational Environment will provide a secure physical computing space such than an adversary is not able to make modifications to the environment or to the TOE itself, which includes the Management Server. Rationale: The expected deployment of the TOE is in an enterprise computing environment. The Management Server can reasonably be expected to be deployed in a secured environment because it does not provide functionality that would necessitate its deployment in a high-risk public-facing environment.
FDE%20EM%20cPP%20v2.docx