1. Pass, if the listed requirements are implemented when backward compatibility is offered.
2. Pass, if no backward compatibility is offered and the cryptography on the product is state-of-the-art as defined in **CON_CRYPTO-1**
2. Pass, if no backward compatibility is offered and the cryptography on the product is state-of-the-art as defined in **CON_CRYPTO-1**.
3. Fail otherwise.
**Supporting Evidence:**
@@ -2064,13 +2064,15 @@ Verify that:
### 6.5.2 SU_UPDATES-2
**Objective:** Responsibility of OS level upgrades can be elsewhere outside of the system control.
**Objective:** Responsibility of OS level upgrades can be elsewhere outside of the system control. Updates of the product OS and security relevant updates are divorced and can be scheduled according to the operational needs and the application is designed to tolerate this behavior without compromising the service availability.
**Preparation:** None
**Preparation:**
1. Have the product initialised and available with the default configuration and required credentials.
**Activities:**
1. Study the technical documentation.
1. Study the technical documentation about the separation of security relevant updates.
