Page 50 of 82
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.
Table 20: List of specifications of Management Functions
Functional
requirements
Management requirements
Management items
FAU_GEN.1
None
-
FAU_SAR.1
a) Maintenance (deletion, modification,
addition) of the group of users with read
access right to the audit records.
a) Management of the machine
administrator from administrator roles.
FAU_SAR.2
None
-
FAU_STG.1
None
-
FAU_STG.4
a) Maintenance (deletion, modification,
addition) of actions to be taken in case
of audit storage failure.
None: Actions are fixed and not an object
of management.
FCS_CKM.1
None
-
FCS_COP.1
None
-
FDP_ACC.1
None
-
FDP_ACF.1
a) Managing the attributes used to make
explicit access or denial based
decisions.
a) Management of the file administrator
from administrator roles.
FDP_IFC.1
None
-
FDP_IFF.1
a) Managing the attributes used to make
explicit access based decisions.
None: Attributes (data type) used to make
explicit access-based decisions are fixed
and there are no interfaces to change.
FIA_AFL.1
a) Management of the threshold for
unsuccessful authentication attempts.
b) Management of actions to be taken in
the event of an authentication failure.
a) Security Management Function
(management of machine control data):
management of the Number of Attempts
before Lockout by machine administrator.
b) Management of unlocking
administrators and Lockout release
operations for locked-out users.
FIA_ATD.1
a) If so indicated in the assignment, the
authorised administrator might be able
to define additional security attributes
for users.
None: No functions for defining additional
security attributes for users.
FIA_SOS.1
a) Management of the metric used to
verify the secrets.
Security Management Function
(management of machine control data):
The user administrator manages the
following settings of the machine control
data:
- Minimum Password Length
- Password Complexity Setting