Ricoh Aficio MP 4001 - Page 36

Page 36 of 81
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.
Functional requirements Actions which should be auditable Auditable events of TOE
(Outcome: Success/Failure)
3. Changing administrator
authentication information (Outcome:
Success/Failure)
4. Changing supervisor authentication
information (Outcome:
Success/Failure)
FIA_UAU.2
Minimal: Unsuccessful use of the
authentication mechanism;
Basic: All use of the authentication
mechanism.
Basic
1. Login (Outcome: Success/Failure)
FIA_UAU.7 None -
FIA_UID.2
a) Minimal: Unsuccessful use of the
user identification mechanism,
including the user identity provided;
b) Basic: All use of the user
identification mechanism, including
the user identity provided.
b) Basic
1. Login (Outcome: Success/Failure)
FIA_USB.1
a) Minimal: Unsuccessful binding of
user security attributes to a subject
(e.g. creation of a subject).
b) Basic: Success and failure of
binding of user security attributes to a
subject (e.g. success or failure to create
a subject).
b) Basic
1. Login (Outcome: Success/Failure)
FMT_MSA.1
a) Basic: All modifications of the
values of security attributes.
<Individually-defined auditable
events>
1. Adding and deleting administrator
roles
2. Changing document data ACL
FMT_MSA.3
a) Basic: Modifications of the default
setting of permissive or restrictive
rules.
b) Basic: All modifications of the
initial values of security attributes.
Auditable events not recorded.
FMT_MTD.1
a) Basic: All modifications to the
values of TSF data.
<Individually-defined auditable
events>
1. Newly creating authentication
information of general users.
2. Changing authentication
information of general users.
3. Deleting authentication
information of general users.
4. Changing administrator
Authentication information.
5. Changing supervisor