[2600] Questions for the NJ Meeting

[Sameer Yami <Sameer.Yami@xxxxxxxxxxxxxxxx>]

Hi All,

I had a couple of questions that I would like to discuss in the upcoming
meeting.

1. Is "OS" TOE ?

In P2600 meeting of Feb 2007 , someone said OS is a part of TOE..

Though this problem relates to the treatment of the management data for the
temporary file(s) and the operation of the OS, however,
if the TOE contains OS, it needs the certified OS or development document
(ADV) of OS because it becomes the object of the evaluation.
This is not realistic.
I think it is possible if it is OS of original development, but it is
difficult to provide the detailed development documents of the OS vendor.
So the OS should neither be an asset nor TOE.

2. Classification of Management Data

Management Data is an asset, but neither the data classification nor the
protection method have been decided.
We need to discuss this in the meeting

An example is in the table. (Please note that this is not a complete
example. There could be more things that can be added).

(See attached file: management_data.xls)


thanks
-Sameer
--------------------------------------------------------------------------------------------

Sameer Yami
sameer.yami@tabs.toshiba.com
Staff Engineer
Advanced Engineering Group
Toshiba America Business Solutions
Irvine, CA-92618.
Phone : (949) 462-6726
--------------------------------------------------------------------------------------------

management_data.xls