Security Objectives; Security Objectives For The Operational Environment - ATEN CS1182DP4 Instructions Manual

Security Target
4

Security Objectives

Like the Security Problem Definition, this Security Target includes by reference the Security Objectives
from the [PSD], [MOD_VI_V1.0], [MOD_AO_V1.0], and [MOD_KM_V1.0].
The [PSD], [MOD_AO_V1.0], and [MOD_VI_V1.0] security objectives for the operational environment are
reproduced below, since these objectives characterize technical and procedural measures each consumer
must implement in their operational environment.
In general, the [PSD] has presented a Security Objectives statement appropriate for peripheral sharing
devices. Consequently, the [PSD] security objectives are suitable for the TOE.
4.1

Security Objectives for the Operational Environment

Objective
OE.NO_MICROPHONES (from
[MOD_AO_V1.0])
OE.NO_SPECIAL_ANALOG_CAPABILITIES
(from [MOD_VI_V1.0])
OE. NO_TEMPEST (from [PSD])
OE.NO_WIRELESS_DEVICES (from [PSD])
OE.PHYSICAL (from [PSD])
OE.TRUSTED_ADMIN (from [PSD])
OE.TRUSTED_CONFIG (from [PSD])
Table 6: Security Objectives for the Operational Environment
The operational environment is expected to ensure that
microphones are not plugged into the TOE audio output interfaces.
The operational environment will not have special analog data
collection cards or peripherals such as analog to digital interface,
high performance audio interface, or a component with digital signal
processing or analog video capture functions.
The operational environment will not use TEMPEST approved
equipment.
The operational environment will not include wireless keyboards,
mice, audio, user authentication, or video devices.
The operational environment will provide physical security,
commensurate with the value of the PSD and the data that transits
it.
The operational environment will ensure that trusted PSD
Administrators and users are appropriately trained.
The operational environment will ensure that administrators
configuring the PSD and its operational environment follow the
applicable security configuration guidance.
Description
16
Version 1.1
2022-03-08