Testing must be shown to be sufficient. TOE and tools are under configuration control with changes audited, compiler options documented. TOE to retain security on re-start after failure. Full definition available in the 'Developer's Guide'. Use the toolbar on the left to visit 'Available Documents'.
Architectural design explains the interrelationship between security enforcing components.
Information on integration process and run time libraries to be produced. Configuration control independent of develeoper. Identification of configured items as security enforcing or security relevant, with support for vaiable relationships between them. Full definition available in the 'Developer's Guide'. Use the toolbar on the left to visit 'Available Documents'.