HP Inc.
HP LaserJet Enterprise MFP M527 Series,
Color LaserJet Enterprise MFP M577 Series, and
PageWide Enterprise Color MFP 586 Series
Firmware with Jetdirect Inside Security Target
Version: 2.0 Copyright © 2008-2016 by atsec information security corporation and HP Inc. Page 39 of 98
Last update: 2016-06-07 or its wholly owned subsidiaries
4 Security Objectives
4.1 Objectives for the TOE
O.AUDIT.LOGGED
The TOE shall create and maintain a log of TOE use and security-relevant events, and prevent its
unauthorized disclosure or alteration.
O.CONF.NO_ALT
The TOE shall protect TSF Confidential Data from unauthorized alteration.
O.CONF.NO_DIS
The TOE shall protect TSF Confidential Data from unauthorized disclosure.
O.DOC.NO_ALT
The TOE shall protect User Document Data from unauthorized alteration.
O.DOC.NO_DIS
The TOE shall protect User Document Data from unauthorized disclosure.
O.FUNC.NO_ALT
The TOE shall protect User Function Data from unauthorized alteration.
O.INTERFACE.MANAGED
The TOE shall manage the operation of external interfaces in accordance with security policies.
O.PROT.NO_ALT
The TOE shall protect TSF Protected Data from unauthorized alteration.
O.SOFTWARE.VERIFIED
The TOE shall provide procedures to self-verify executable code in the TSF.
O.USER.AUTHORIZED
The TOE shall require identification and authentication of Users, and shall ensure that Users are
authorized in accordance with security policies before allowing them to use the TOE.
4.2 Objectives for the Operational Environment
OE.ADMIN.PC.SECURE
The TOE Owner shall locate the Administrative Computer in a physically secured and managed
environment and allow only authorized personnel access to it.
OE.ADMIN.TRAINED
The TOE Owner shall ensure that TOE Administrators are aware of the security policies and
procedures of their organization; have the training, competence, and time to follow the
manufacturer's guidance and documentation; and correctly configure and operate the TOE in
accordance with those policies and procedures.
OE.ADMIN.TRUSTED
The TOE Owner shall establish trust that TOE Administrators will not use their privileged access
rights for malicious purposes.
To Next Page
Loading...