FAU_STG.3    Action in case of possible audit data loss

User application notes

This component requires that actions will be taken when the audit trail exceeds certain pre-defined limits.

Operations

Assignment:

In FAU_STG.3.1, the PP/ST author should indicate the pre-defined limit. If the management functions indicate that this number might be changed by the authorised user, this value is the default value. The PP/ ST author might choose to let the authorised user define this limit. In that case the assignment can be for example "an authorised user set limit".

In FAU_STG.3.1, the PP/ST author should specify actions that should be taken in case of imminent audit storage failure indicated by exceeding the threshold. Actions might include informing an authorised user.