Page 1 A Guide to the Procurement of Trusted Systems: An ... - csirt

(Class 01 and above):
3.2.2.2.1.6 Labeling Human-Readable Output
(Class B1 and above):
3.2.2.2.1.7 Mandatory Access Control (Class B1
and above):
3.2.2.2.1.8 Subject Sensitivity Labels (Class
B2 and above):
3.2.2.2.1.9 Device Labels (Class B2 and
above):
3.2.2.2.2 ACCOUNTABILITY
3.2.2.2.2.1 Identification and Authentication
(all classes):
3.2.2.2.2.2 Audit (Class C2 and above):
3.2.2.2.2.3 Trusted Path (Class B2 and above):
3.2.2.2.3 ASSURANCE
3.2.2.2.3.1 System Architecture (all classes):
3.2.2.2.3.2 System Integrity (all classes):
3.2.2.2.3.3 Covert Channel Analysis (Class B2
and above):
3.2.2.2.3.4 Trusted Facility Management (Class
B2 and above):
3.2.2.2.3.5 Security Testing (all classes):
3.2.2.2.3.6 Design Specification and
Verification (Class B1 and above):
3.2.2.2.3.7 Configuration Management (Class B2
and above):
3.2.2.2.3.8 Trusted Recovery (Class B3 and
above):
3.2.2.2.3.9 Trusted Distribution (Class A1):
3.2.2.2.4 DOCUMENTATION
3.2.2.2.4.1 3.2.2.2.4.1 Security Features
User's Guide (all classes):
3.2.2.2.4.2 Trusted Facility Manual (all
classes):
3.2.2.2.4.3 Test Documentation (all classes):
3.2.2.2.4.4 Design Documentation (all
classes):
3.3 SOFTWARE
3.3.1 PRINCIPAL SOFTWARE FACTORS
3.3.1.1 STRUCTURE AND DISCIPLINE
3.3.1.2 COST ESTIMATING
3.3.1.3 PROGRAMMING LANGUAGE
3.3.1.4 DATABASE MANAGEMENT SYSTEMS (DBMSs)
3.3.1.5 UTILITIES
3.3.2 THE PROCESS
3.3.3 MANAGING SOFTWARE DEVELOPMENT
3.3.3.1 DESIGN DOCUMENTATION
3.3.3.1.1 SECURITY POLICY
3.3.3.1.2 MODEL
3.3.3.1.3 DESCRIPTIVE TOP-LEVEL SPECIFICATION
3.3.3.1.4 FORMAL TOP-LEVEL SPECIFICATION
3.3.3.1.5 SYSTEM/SUBSYSTEM SPECIFICATION ("B"
SPECIFICATION) AND UNIT SPECIFICATION ("C"
Page 4