Security Target
Page 36
... TSF. P.RCGATE.COMM.PROTECT Protection of communication with RC Gate As for communication with operation permission of the TOE shall be reviewed by the TOE and its IT environment. Copyright (c) 2011 RICOH COMPANY, LTD. P.INTERFACE.MANAGEMENT Management of external interfaces To prevent unauthorised use of the external interfaces of the TOE, operation...
... TSF. P.RCGATE.COMM.PROTECT Protection of communication with RC Gate As for communication with operation permission of the TOE shall be reviewed by the TOE and its IT environment. Copyright (c) 2011 RICOH COMPANY, LTD. P.INTERFACE.MANAGEMENT Management of external interfaces To prevent unauthorised use of the external interfaces of the TOE, operation...
Security Target
Page 40
...2011 RICOH COMPANY, LTD. OE.ADMIN.TRAINED Administrator training The responsible manager of MFP shall ensure that audit logs are aware of the security policies and procedures of their privileged access rights for malicious purposes according to the guidance document. OE.AUDIT.REVIEWED Log... audit The responsible manager of MFP shall ensure that administrators are reviewed at appropriate intervals according to the guidance document for detecting security violations or unusual ...
...2011 RICOH COMPANY, LTD. OE.ADMIN.TRAINED Administrator training The responsible manager of MFP shall ensure that audit logs are aware of the security policies and procedures of their privileged access rights for malicious purposes according to the guidance document. OE.AUDIT.REVIEWED Log... audit The responsible manager of MFP shall ensure that administrators are reviewed at appropriate intervals according to the guidance document for detecting security violations or unusual ...
Security Target
Page 41
... O.PROT.NO_ALT O.CONF.NO_DIS O.CONF.NO_ALT O.USER.AUTHORIZED OE.USER.AUTHORIZED O.SOFTWARE.VERIFIED O.AUDIT.LOGGED OE.AUDIT_STORAGE.PROTCTED OE.AUDIT_ACCESS_AUTHORIZED OE.AUDIT.REVIEWED O.INTERFACE.MANAGED OE.PHYSICAL.MANAGED OE.INTERFACE.MANAGED O.STORAGE.ENCRYPTED O.RCGATE.COMM.PROTECT OE.ADMIN.TRAINED OE.ADMIN.TRUSTED OE.USER.TRAINED T.DOC.... P.SOFTWARE.VERIFICATION X P.AUDIT.LOGGING X XXX P.INTERFACE.MANAGEMENT X X P.STORAGE.ENCRYPTION X P.RCGATE.COMM.PROTECT X A.ACCESS.MANAGED X A.ADMIN.TRAINING X A.ADMIN.TRUST X A.USER.TRAINING X Copyright (c) 2011 RICOH COMPANY, LTD.
... O.PROT.NO_ALT O.CONF.NO_DIS O.CONF.NO_ALT O.USER.AUTHORIZED OE.USER.AUTHORIZED O.SOFTWARE.VERIFIED O.AUDIT.LOGGED OE.AUDIT_STORAGE.PROTCTED OE.AUDIT_ACCESS_AUTHORIZED OE.AUDIT.REVIEWED O.INTERFACE.MANAGED OE.PHYSICAL.MANAGED OE.INTERFACE.MANAGED O.STORAGE.ENCRYPTED O.RCGATE.COMM.PROTECT OE.ADMIN.TRAINED OE.ADMIN.TRUSTED OE.USER.TRAINED T.DOC.... P.SOFTWARE.VERIFICATION X P.AUDIT.LOGGING X XXX P.INTERFACE.MANAGEMENT X X P.STORAGE.ENCRYPTION X P.RCGATE.COMM.PROTECT X A.ACCESS.MANAGED X A.ADMIN.TRAINING X A.ADMIN.TRUST X A.USER.TRAINING X Copyright (c) 2011 RICOH COMPANY, LTD.
Security Target
Page 44
...ACCESS.MANAGED A.ACCESS.MANAGED is enforced by OE.PHYSICAL.MANAGED. AUDIT.LOGGING P.AUDIT.LOGGING is upheld by O.AUDIT.LOGGED, OE.AUDIT.REVIEWED, OE.AUDIT_STORAGE.PROTECTED and OE.AUDIT_ACCESS.AUTHORIZED. A.ADMIN.TRAINING A.ADMIN.TRAINING is enforced by OE.ADMIN.TRAINED. P.RCGATE.COMM.PROTECT... by these objectives. Page 43 of activity according to the guidance document. Copyright (c) 2011 RICOH COMPANY, LTD. By OE.AUDIT.REVIEWED, the responsible manager of MFP reviews audit logs at appropriate intervals for security violations or unusual patterns of 91 P. By OE.PHYSICAL...
...ACCESS.MANAGED A.ACCESS.MANAGED is enforced by OE.PHYSICAL.MANAGED. AUDIT.LOGGING P.AUDIT.LOGGING is upheld by O.AUDIT.LOGGED, OE.AUDIT.REVIEWED, OE.AUDIT_STORAGE.PROTECTED and OE.AUDIT_ACCESS.AUTHORIZED. A.ADMIN.TRAINING A.ADMIN.TRAINING is enforced by OE.ADMIN.TRAINED. P.RCGATE.COMM.PROTECT... by these objectives. Page 43 of activity according to the guidance document. Copyright (c) 2011 RICOH COMPANY, LTD. By OE.AUDIT.REVIEWED, the responsible manager of MFP reviews audit logs at appropriate intervals for security violations or unusual patterns of 91 P. By OE.PHYSICAL...
Security Target
Page 51
.... Dependencies: FAU_GEN.1 Audit data generation FAU_STG.1.1 The TSF shall protect the stored audit records in case of the trusted channel functions. Dependencies: FAU_SAR.1 Audit review Copyright (c) 2011 RICOH COMPANY, LTD. FAU_STG.1 Protected audit trail storage Hierarchical to interpret the information. FAU_STG.4 Prevention of audit data loss Hierarchical to: FAU_STG.3 Action in the...
.... Dependencies: FAU_GEN.1 Audit data generation FAU_STG.1.1 The TSF shall protect the stored audit records in case of the trusted channel functions. Dependencies: FAU_SAR.1 Audit review Copyright (c) 2011 RICOH COMPANY, LTD. FAU_STG.1 Protected audit trail storage Hierarchical to interpret the information. FAU_STG.4 Prevention of audit data loss Hierarchical to: FAU_STG.3 Action in the...
Security Target
Page 79
Page 78 of Management Function Date settings (year/month/day), time settings (hour/minute) Copyright (c) 2011 RICOH COMPANY, LTD. FAU_STG.4 The TOE writes the newest audit log over the oldest audit log when there is insufficient space in the audit log files ... the newest audit log. This function provides the recorded audit log in a text format when the MFP administrator instructs the TOE to audit (audit log review). The TOE provides the audit logs in a legible fashion for each security function. FPT_STM.1 The date (year/month/day) and time (hour/minute/second) the...
Page 78 of Management Function Date settings (year/month/day), time settings (hour/minute) Copyright (c) 2011 RICOH COMPANY, LTD. FAU_STG.4 The TOE writes the newest audit log over the oldest audit log when there is insufficient space in the audit log files ... the newest audit log. This function provides the recorded audit log in a text format when the MFP administrator instructs the TOE to audit (audit log review). The TOE provides the audit logs in a legible fashion for each security function. FPT_STM.1 The date (year/month/day) and time (hour/minute/second) the...