Samsung X4220 Instruction Manual page 40

Samsung Multifunction MultiXpress X4220, X4250, X4300, X401, K4250, K4300, K4350, K401 Series
Threats, Policies, and
Assumptions
P.SOFTWARE.VERIF
ICATION
P.AUDIT.LOGGING
P.INTERFACAE.MA
NAGEMENT
A.ACCESS.MANAGE
D
A.ADMIN.TRAININ
G
A.ADMIN.TRUST
A.USER.TRAINING
Copyright
Summary
Procedures will exist to self-
verify executable code in the TSF
An audit trail of TOE use and
security-relevant events will be
created, maintained, protected,
and reviewed
Operation of external interfaces
will be controlled by the TOE and
its IT environment
The TOE environment provides
protection from unmanaged
access to the physical components
and data interfaces of the TOE
Administrators are aware of and
trained to follow security policies
and procedures
Administrators do not use their
privileged access rights
malicious purposes
TOE Users are aware of and
trained to follow security policies
and procedures

2014 SAMSUNG ELECTRONICS Co., Ltd., All rights reserved
Objectives and Rationale
O.SOFTWARE.VERIFIED provides procedures
to self-verify executable code in the TSF.
O.AUDIT.LOGGED creates and maintains a log
of TOE use and security-relevant events, and
prevents unauthorized disclosure or alteration
O.AUDIT_STORAGE.PROTEDTED protects
audit records from unauthorized access, deletion,
and modification.
O.AUDIT_ACCESS.AUTHORIZED allows the
access of audit records only by authorized
persons,
OE.AUDIT_STORAGE.PROTECTED protects
exported audit records from unauthorized access,
deletion and modification,
OE.AUDIT_ACCESS.AUTHORIZED
establishes responsibility of the TOE Owner to
provide appropriate access to exported audit
records.
OE.AUDIT.REVIEWED establishes
responsibility of the TOE Owner to ensure that
audit logs are appropriately reviewed.
O.INTERFACE.MANAGED manages the
operation of external interfaces in accordance
with security policies.
OE.INTERFACE.MANAGED establishes a
protected environment for TOE external
interfaces
OE.PHYSICAL.MANAGED establishes a
protected physical environment for the TOE.
OE.ADMIN.TRAINED establishes
responsibility of the TOE Owner to provide
appropriate Administrator training.
OE.ADMIN.TRUST establishes responsibility of
for the TOE Owner to have a trusted relationship
with Administrators.
OE.USER.TRAINED establishes responsibility
of the TOE Owner to provide appropriate user
training.
40