Page 38 of 82
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.
Functional requirements
Actions which should be auditable
Auditable events of TOE
FMT_MTD.1
a) Basic: All modifications to the
values of TSF data.
<Individually-defined auditable
events>
1. Newly creating authentication
information of general users.
2. Changing authentication
information of general users.
3. Deleting authentication
information of general users.
4. Changing administrator
Authentication information.
5. Changing supervisor
Authentication information.
6. Changing time and date of system
clock.
7. Deleting entire audit logs.
FMT_SM F.1
a) Minimal: Use of the Management
Functions.
<Individually defined auditable
events>
1. Adding and deleting administrator
roles.
2. Lockout release by the unlocking
administrator.
3. Changing time and date of system
clock.
FMT_SMR.1
a) Minimal: modifications to the
group of users that are part of a role;
b) Detailed: every use of the rights of
a role.
a) Minimal
1. Adding and deleting administrator
roles.
FPT_STM.1
a) Minimal: changes to the time;
b) Detailed: providing a timestamp.
a) Minimal
1. Changing time and date of system
clock.
FPT_TST.1
a) Basic: Execution of the TSF self
tests and the results of the tests.
-
FTP_ITC.1
a) Minimal: Failure of the trusted
channel functions.
b) Minimal: Identification of the
initiator and target of failed trusted
channel functions.
c) Basic: All attempted uses of the
trusted channel functions.
d) Basic: Identification of the initiator
and target of all trusted channel
functions.
<Individually-defined auditable
events>
1. Communication with trusted IT
products (Outcome: Success/Failure,
Communication IP address)