Xerox WorkCentre 7220

Xerox Multi-Function Device Security Target
28
Copyright

2013 Xerox Corporation. All rights reserved.
Table 19: Completeness of security objectives
Objectives
O.DOC.NO_DIS
O.DOC.NO_ALT
O.FUNC.NO_ALT
O.PROT.NO_ALT
O.CONF.NO_DIS
O.CONF.NO_ALT
O.USER.AUTHORIZED
OE.USER.AUTHORIZED
O.SOFTWARE.VERIFIED
O.AUDIT.LOGGED
O.AUDIT_STORAGE.PROTECTED
OE.AUDIT_STORAGE.PROTECTED
OE.AUDIT_ACCESS.AUTHORIZED
OE.AUDIT.REVIEWED
OE.INTERFACE.MANAGED
OE.USER.AUTHENTICATED
OE.PHYISCAL.MANAGED
OE.INTERFACE.MANAGED
OE.ADMIN.TRAINED
OE.ADMIN.TRUSTED
OE.USER.TRAINED
Threats, policies and
assumptions
T.DOC.DIS
X
X
X
X
T.DOC.ALT
X
X
X
X
T.FUNC.ALT
X
X
X
X
T.PROT.ALT
X
X
X
X
T.CONF.DIS
X
X
X
X
T.CONF.ALT
X
X
X
X
P.USER.AUTHORIZATION
X
X
X
P.SOFTWARE.VERIFICATION
X
P.AUDIT.LOGGING
X
X
X
X
X
P.INTERFACE.MANAGEMENT
X
X
A.ACCESS.MANAGED
X
A.ADMIN.TRAINING
X
A.ADMIN.TRUST
X
A.USER.TRAINING
X
Table 20: Sufficiency of security objectives
Threats. Policies, and
Assumptions
Summary
Objectives and rationale
T.DOC.DIS
User Document Data
may be disclosed to
unauthorized persons
O.DOC.NO_DIS protects D.DOC
from unauthorized disclosure
O.USER.AUTHORIZED
establishes user identification and
authentication as the basis for
authorization
OE.USER.AUTHORIZED
establishes responsibility of the
TOE Owner to appropriately grant
authorization