On Tue, 19 Dec 2006 10:59:18 CST, Klaus Weidner said: > On Tue, Dec 19, 2006 at 08:41:26AM -0800, Casey Schaufler wrote: > > --- [EMAIL PROTECTED] wrote: > > > And then there's after-certification maintenance to > > > deal with. And since > > > I'm an idiot, can anybody hand me a pointer to the > > > CC/EAL equivalent of the > > > old NCSC 'Rating Maintenance Phase' document > > > (NCSC-TG-013 - the horribly pink > > > part of the old Rainbow Series)? > > > > They may have updated the program without > > telling me (like it never happens to you!) > > but the RAMP equivalence under the CC is > > (or was) "The program is cheap, the changes > > will be small, so a new evaluation is no > > big deal, you've done (and saved) all the > > work". > > Afraid so. Certificate maintenance procedures get talked about > periodically, but so far I'm not aware of tangible progress towards > actually having them.
Ahh, good. That explains my inability to find said beast - it's off having lunch with Nessie and Bigfoot. :)
pgphMBV0ZnbRh.pgp
Description: PGP signature
-- redhat-lspp mailing list [email protected] https://www.redhat.com/mailman/listinfo/redhat-lspp
