@@ -1183,7 +1183,7 @@ The assessment criteria for each security requirements are described in a struct
## 6.4 Secure updates
## 6.5 Authentication and access control
### 6.5.1 General
- REFERENCE: ACC_PKI_AC_001
- OBJECTIVE:
@@ -1234,6 +1234,30 @@ The assessment criteria for each security requirements are described in a struct
- Results of identification and authentication attempts (both successful and failed).
- Screenshots or logs of access attempts, rights verification, or rejected actions.
### 6.5.2 Monitoring
- REFERENCE: ACC_PKI_LOG_005
- OBJECTIVE: Verify the product's ability to detect unauthorised modifications to the stored audit records during the audit.
- PREPARATION: Ability to trigger auditable events as a user, and ability to audit events. Ability to directly modify the contents of existing audit records.
- ACTIVITIES: Trigger an auditable event. Access and copy the corresponding audit record separately.
- Directly modify the contents of the stored audit record in the product.
- Attempt to access the audit record.
- VERDICT: SUCCESS if the last audit fails; else FAIL.
- EVIDENCE:
a) the way the event was triggered, and the corresponding audit record which was copied;
b) the way the audit record was directly modified;
c) the way the last audit was attempted, and the corresponding response from the product.
## 6.6 Confidentiality
## 6.7 Integrity
@@ -1504,28 +1528,6 @@ REFERENCE: ACC_PKI_LOG_001
d) the copies of existing audit records, before and after attempts.
- REFERENCE: ACC_PKI_LOG_005
- OBJECTIVE: Verify the product's ability to detect unauthorised modifications to the stored audit records during the audit.
- PREPARATION: Ability to trigger auditable events as a user, and ability to audit events. Ability to directly modify the contents of existing audit records.
- ACTIVITIES: Trigger an auditable event. Access and copy the corresponding audit record separately.
- Directly modify the contents of the stored audit record in the product.
- Attempt to access the audit record.
- VERDICT: SUCCESS if the last audit fails; else FAIL.
- EVIDENCE:
a) the way the event was triggered, and the corresponding audit record which was copied;
b) the way the audit record was directly modified;
c) the way the last audit was attempted, and the corresponding response from the product.
- REFERENCE: ACC_PKI_LOG_006
- OBJECTIVE: Verify the product's prevention of auditable events, except those taken by the auditor, if the audit log is full.
