Security Assurance Requirements Rationale - Fuji Xerox C2265 Manual

Functional Requirement
Requirement and its
name
FTA_SSL.3
TSF-initiated termination
FTP_ITC.1
Inter-TSF trusted channel
FPT_FDI_EXP.1
Restricted forwarding of
data to external
interfaces
6.3.3.

Security Assurance Requirements Rationale

This TOE is Hardcopy Device used in restrictive commercial information processing
environments that require a relatively high level of document security, operational
accountability, and information assurance. The TOE environment will be exposed to only a low
level of risk because it is assumed that the TOE will be located in a restricted or monitored
environment that provides almost constant protection from unauthorized and unmanaged
access to the TOE and its data interfaces.
Agents have limited or no means of infiltrating the TOE with code to effect a change, and the
TOE self-verifies its executable code to detect unintentional malfunctions. As such, the
Evaluation Assurance Level 2 is appropriate.
EAL 2 is augmented with ALC_FLR.2, Flaw reporting procedures. ALC_FLR.2 ensures that
instructions and procedures for the reporting and remediation of identified security flaws are in
place, and their inclusion is expected by the consumers of this TOE.
Fuji Xerox C2265/C2263
Dependencies of Functional Requirements
Requirement that
is dependent on
None
None
FMT_SMF.1
FMT_SMR.1
- 107 -
Security Target
Requirement that is not dependent on
and its rationale
-
Copyright

2016 by Fuji Xerox Co., Ltd