Security Objectives For The Toe (Additional); Security Objectives For Operational Environment; Table 19: Security Objectives For The Toe (Additional); Table 20: Security Objectives For Operational Environment - Samsung X4220 Instruction Manual

Samsung Multifunction MultiXpress X4220, X4250, X4300, X401, K4250, K4300, K4350, K401 Series

4.1.2 Security Objectives for the TOE (Additional)

The security objectives for the TOE additionally defined are as follows:

Table 19: Security Objectives for the TOE (Additional)

Objective
O.AUDIT_STORAGE.PROTECTED
O.AUDIT_ACCESS.AUTHORIZED
4.2

Security Objectives for Operational Environment

This section describes the Security Objectives that must be fulfilled by technical and procedural
measures in the operational environment of the TOE. This Security Target conforms to the security
objectives for the operational environment included in the PP.
4.2.1 Security Objectives for Operational Environment
The security objectives for the operational environment taken from the PP to which this Security
Target conforms are as shown in the following Table 20 (they are completely the same as the PP):

Table 20: Security Objectives for Operational Environment

Objective
OE.AUDIT_STORAGE.PROTECTED
OE.AUDIT_ACCESS.AUTHORIZED
OE.INTERFACE.MANAGED
OE.PHYSICAL.MANAGED
OE.USER.AUTHORIZED
Copyright
Definition
The TOE shall protect audit records from unauthorized access, deletion
and modification.
The TOE shall allow access to audit records only by authorized
persons.
Definition
If audit records are exported from the TOE to another trusted IT
product, the TOE Owner shall ensure that those records are protected
from unauthorized access, deletion, and modification.
If audit records generated by the TOE are exported from the TOE to
another trusted IT product, the TOE Owner shall ensure that those
records can be accessed in order to detect potential security violations
and only by authorized persons.
The IT environment shall provide protection from unmanaged access
to TOE external interfaces.
The TOE shall be placed in a secure or monitored area that provides
protection from unmanaged physical access to the TOE.
The TOE Owner shall grant permission to Users to be authorized to
use the TOE according to the security policies and procedures of their
organization.

2014 SAMSUNG ELECTRONICS Co., Ltd., All rights reserved
36