@@ -1645,28 +1645,6 @@ The assessment criteria for each security requirements are described in a struct
- Results of identification and authentication attempts (both successful and failed).
- Screenshots or logs of access attempts, rights verification, or rejected actions.
### 6.5.2 AC - Monitoring
- REFERENCE: ACC-PKI-AAC-03
- OBJECTIVE: Verify the product's ability to detect unauthorised modifications to the stored audit records during the audit.
- PREPARATION: Ability to trigger auditable events as a user, and ability to audit events. Ability to directly modify the contents of existing audit records.
- ACTIVITIES: Trigger an auditable event. Access and copy the corresponding audit record separately.
- Directly modify the contents of the stored audit record in the product.
- Attempt to access the audit record.
- VERDICT: SUCCESS if the last audit fails; else FAIL.
- EVIDENCE:
a) the way the event was triggered, and the corresponding audit record which was copied;
b) the way the audit record was directly modified;
c) the way the last audit was attempted, and the corresponding response from the product.
