Navy Handbook for the Computer Security Certification of Trusted Systems: Assurance Mappings


Published: Feb 21, 2000 Updated: Feb 21, 2000 Section: Network Security Library :: Policy & Standards Author: John McHugh Printable Version Adjust font size: 1 2 3 4 5

A system must satisfy srict assurance requirements for successful evaluation at the B3 class of the Trusted Computer System Evaluation Criteria (TCSEC). Many of these requirements are essentially requirements on process or on documentation. Unlike many other areas, TCSEC requirements are a job of selling to an uncertain buyer: TCSEC evaluation is a matter of convincing a responsible team of evaluators that the system can be trusted to manage sensitive data in an appropriate fashion.

Click Here to download this article