a. You need to read ISO15408 for the CC stuff. b. I will reply on the condition that you eat this message and shunt all of the associated electrons to a secured protective earth stud that is guarded by a squad of Marines; all else must report to the CIA for a mind-wipe...
Secret Internet Protocol Router Network is what the box is connected to; and unless you have something that is considered the end-point or the node is 'trusted guard' there may be no special requirements. My opinion - the DoD has SIPRNET because it has given up on making Mr Bill's products secure. If there is anything like TEMPEST requirements for boxes connected to SIPRNET, it would probably be in the DoD's RFP or procurement spec for the box. Bing/Google/yada is your friend. Brian From: [email protected] [mailto:[email protected]]On Behalf Of [email protected] Sent: Thursday, December 17, 2009 11:40 AM To: [email protected] Subject: EAL4 and SIPRNET Hello group, We have been asked by a customer if our product (IT product) meets the followings: (a) Evaluation Assurance Level of at least 4 (EAL4), (b) SIPRNET (Secret Internet Protocol Router Network) Can someone shed some light on this and also let me know if there are any labs out there that can do these types of testing/verification please? Thank you Peter - This message is from the IEEE Product Safety Engineering Society emc-pstc discussion list. To post a message to the list, send your e-mail to <[email protected]> All emc-pstc postings are archived and searchable on the web at: http://www.ieeecommunities.org/emc-pstc Graphics (in well-used formats), large files, etc. can be posted to that URL. Website: http://www.ieee-pses.org/ Instructions: http://listserv.ieee.org/request/user-guide.html List rules: http://www.ieee-pses.org/listrules.html For help, send mail to the list administrators: Scott Douglas <[email protected]> Mike Cantwell <[email protected]> For policy questions, send mail to: Jim Bacher: <[email protected]> David Heald: <[email protected]>
