Security Target
Page 38
... The data stored on the HDD inside the TOE shall be authorised to follow those interfaces shall be reviewed by authorised persons. P.RCGATE.COMM.PROTECT Protection of TOE use the TOE. Copyright (c) 2011 RICOH COMPANY, LTD. P.AUDIT.LOGGING Management of audit log records The TOE shall create and maintain a log of communication...
... The data stored on the HDD inside the TOE shall be authorised to follow those interfaces shall be reviewed by authorised persons. P.RCGATE.COMM.PROTECT Protection of TOE use the TOE. Copyright (c) 2011 RICOH COMPANY, LTD. P.AUDIT.LOGGING Management of audit log records The TOE shall create and maintain a log of communication...
Security Target
Page 42
...train users according to the guidance document and ensure that provides protection from physical access to the guidance document. Copyright (c) 2011 RICOH COMPANY, LTD. Page 41 of 93 OE.INTERFACE.MANAGED Management of external interfaces in IT environment The IT environment shall take ...USER.AUTHORIZED Assignment of user authority The responsible manager of MFP shall ensure that administrators are reviewed at appropriate intervals according to follow the guidance document; OE.AUDIT.REVIEWED Log audit The responsible manager of MFP shall give users the authority to use their ...
...train users according to the guidance document and ensure that provides protection from physical access to the guidance document. Copyright (c) 2011 RICOH COMPANY, LTD. Page 41 of 93 OE.INTERFACE.MANAGED Management of external interfaces in IT environment The IT environment shall take ...USER.AUTHORIZED Assignment of user authority The responsible manager of MFP shall ensure that administrators are reviewed at appropriate intervals according to follow the guidance document; OE.AUDIT.REVIEWED Log audit The responsible manager of MFP shall give users the authority to use their ...
Security Target
Page 43
... O.PROT.NO_ALT O.CONF.NO_DIS O.CONF.NO_ALT O.USER.AUTHORIZED OE.USER.AUTHORIZED O.SOFTWARE.VERIFIED O.AUDIT.LOGGED OE.AUDIT_STORAGE.PROTCTED OE.AUDIT_ACCESS_AUTHORIZED OE.AUDIT.REVIEWED O.INTERFACE.MANAGED OE.PHYSICAL.MANAGED OE.INTERFACE.MANAGED O.STORAGE.ENCRYPTED O.RCGATE.COMM.PROTECT OE.ADMIN.TRAINED OE.ADMIN.TRUSTED OE.USER.TRAINED T.DOC...SOFTWARE.VERIFICATION X P.AUDIT.LOGGING X XXX P.INTERFACE.MANAGEMENT X X P.STORAGE.ENCRYPTION X P.RCGATE.COMM.PROTECT X A.ACCESS.MANAGED X A.ADMIN.TRAINING X A.ADMIN.TRUST X A.USER.TRAINING X Copyright (c) 2011 RICOH COMPANY, LTD.
... O.PROT.NO_ALT O.CONF.NO_DIS O.CONF.NO_ALT O.USER.AUTHORIZED OE.USER.AUTHORIZED O.SOFTWARE.VERIFIED O.AUDIT.LOGGED OE.AUDIT_STORAGE.PROTCTED OE.AUDIT_ACCESS_AUTHORIZED OE.AUDIT.REVIEWED O.INTERFACE.MANAGED OE.PHYSICAL.MANAGED OE.INTERFACE.MANAGED O.STORAGE.ENCRYPTED O.RCGATE.COMM.PROTECT OE.ADMIN.TRAINED OE.ADMIN.TRUSTED OE.USER.TRAINED T.DOC...SOFTWARE.VERIFICATION X P.AUDIT.LOGGING X XXX P.INTERFACE.MANAGEMENT X X P.STORAGE.ENCRYPTION X P.RCGATE.COMM.PROTECT X A.ACCESS.MANAGED X A.ADMIN.TRAINING X A.ADMIN.TRUST X A.USER.TRAINING X Copyright (c) 2011 RICOH COMPANY, LTD.
Security Target
Page 46
... is upheld by this objective. A.ADMIN.TRAINING A.ADMIN.TRAINING is upheld by O.AUDIT.LOGGED, OE.AUDIT.REVIEWED, OE.AUDIT_STORAGE.PROTECTED and OE.AUDIT_ACCESS.AUTHORIZED. Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. AUDIT.LOGGING P.AUDIT.LOGGING is enforced by OE.ADMIN.TRAINED. By ...P.INTERFACE.MANAGEMENT is enforced by this objective. P.STORAGE.ENCRYPTION is enforced by these objectives. By OE.AUDIT.REVIEWED, the responsible manager of MFP reviews audit logs at appropriate intervals for security violations or unusual patterns of 93 P. By OE.PHYSICAL.MANAGED, the...
... is upheld by this objective. A.ADMIN.TRAINING A.ADMIN.TRAINING is upheld by O.AUDIT.LOGGED, OE.AUDIT.REVIEWED, OE.AUDIT_STORAGE.PROTECTED and OE.AUDIT_ACCESS.AUTHORIZED. Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. AUDIT.LOGGING P.AUDIT.LOGGING is enforced by OE.ADMIN.TRAINED. By ...P.INTERFACE.MANAGEMENT is enforced by this objective. P.STORAGE.ENCRYPTION is enforced by these objectives. By OE.AUDIT.REVIEWED, the responsible manager of MFP reviews audit logs at appropriate intervals for security violations or unusual patterns of 93 P. By OE.PHYSICAL.MANAGED, the...
Security Target
Page 53
...storage failure] if the audit trail is full. All rights reserved. FAU_SAR.1 Audit review Hierarchical to : No other components. FAU_SAR.1.2 The TSF shall provide the audit records in the audit trail. FAU_SAR.2 Restricted... audit review Hierarchical to : No other components. Dependencies: FAU_GEN.1 Audit data generation FAU_SAR.1.1 The TSF shall provide [assignment...TSF shall protect the stored audit records in Table 13] and Copyright (c) 2011 RICOH COMPANY, LTD.
...storage failure] if the audit trail is full. All rights reserved. FAU_SAR.1 Audit review Hierarchical to : No other components. FAU_SAR.1.2 The TSF shall provide the audit records in the audit trail. FAU_SAR.2 Restricted... audit review Hierarchical to : No other components. Dependencies: FAU_GEN.1 Audit data generation FAU_SAR.1.1 The TSF shall provide [assignment...TSF shall protect the stored audit records in Table 13] and Copyright (c) 2011 RICOH COMPANY, LTD.
Security Target
Page 81
... by the MFP administrator. FPT_STM.1 The date (year/month/day) and time (hour/minute/second) the TOE records for audit logs to audit (audit log review). Table 34 : List of Audit Events Audit Events Start-up of the Audit Function (*1) Shutdown of the Audit Function (*1) Success and failure of login operations... (*2) Success and failure of login operations from the system clock of Management Function Date settings (year/month/day), time settings (hour/minute) Copyright (c) 2011 RICOH COMPANY, LTD.
... by the MFP administrator. FPT_STM.1 The date (year/month/day) and time (hour/minute/second) the TOE records for audit logs to audit (audit log review). Table 34 : List of Audit Events Audit Events Start-up of the Audit Function (*1) Shutdown of the Audit Function (*1) Success and failure of login operations... (*2) Success and failure of login operations from the system clock of Management Function Date settings (year/month/day), time settings (hour/minute) Copyright (c) 2011 RICOH COMPANY, LTD.