@@ -730,8 +730,6 @@ An operating system may provide, depending on the hardware available and its con
The technical requirements of the present document apply under the environmental profile for operation of the equipment, which shall be in accordance with its intended use. The equipment shall comply with all the technical requirements of the present document at all times when operating within the boundary limits of the operational environmental profile defined by its intended use.
> FIXME not sure how to describe an operational environment for all operating systems!
The manufacturer shall document and communicate the expected environmental profile for the product to the cosumer.
## 4.9 Users
@@ -781,8 +779,6 @@ The operating system often provides many security functions to other components
* Logging and monitoring mechanisms
* Secure deletion and data transfer
## 4.10 Support period
## 4.11 Support period
> Give guidelines to the manufacturer for selecting and documenting the expected support period. Generally the support period should be at least 5 years. It may be shorter if the expected lifetime of the product is less than 5 years. The 5 year minimum support period of CRA Article 13<a href="#_ref_i.1">[i.1]</a> is explained in greater detail in Recital 60, which also provides guidance on exceptions both for special purpose products where a shorter period is necessary or unavoidable and classes of products that the Act expects to have a longer support period. A 10 year minimum support period is suggested for:
@@ -793,7 +789,18 @@ The operating system often provides many security functions to other components
>
> In the future, a dedicated administrative cooperation group “ADCO” whose duties and creation are described in CRA Recitals 22, 62, 108, 109 and Article 52 (15), (16)<a href="#_ref_i.1">[i.1]</a> will assist in the process of setting minimum support periods by collecting and analyzing data on support periods set by manufacturers and setting minimums should manufacturers systematically fail to provide adequate support periods. These duties and powers are described in Recital 62, Recital 117, and Article 13 (8) of the Act<a href="#_ref_i.1">[i.1]</a>. Any support period set by the standards will be superseded by those produced by the commission or its delegates.
The support period of an operating system should generally be at least 10 years.
The support period of an operating system shall be at least 10 years.
FIXME explain how shorter support periods can be justified.
In accordance with Article 13 (8) of the CRA<ahref="#_ref_i.1">[i.1]</a>, the manufacturer shall document how it reached a decision on a specific support period in the technical documentation of the product. The manufacturer shall document the following considerations that affected the decision making process:
1. Reasonable user expectations
1. Nature of the product and intended purpose
1. Relevant law and guidance
1. Support period of products on the market with similar functionality
1. The availability of the operating environment
1. The support period of any integrated components that provide core functions of the product.