Assurance Requirements (continued)
The documentation of the development tools shall unambiguously define
the meaning of all implementation-dependent options. [ALC_TAT.1.3C]
Example: Analysis and Test
The evaluator shall conduct penetration testing, building on the developer
vulnerability analysis, to ensure obvious vulnerabilities have been addressed.
Example: Assurance Planning
The Assurance Maintenance Plan shall describe the assurance maintenance
cycle, stating and justifying the planned schedule of assurance maintenance
audits and the target date of the next re-evaluation of the Target of Evaluation.