Objectives
Development security is concerned with physical, procedural, personnel, and other security measures that may be used in the development environment to protect the TOE. It includes the physical security of the development location and any procedures used to select development staff.
Component levelling
The components in this family are levelled on the basis of whether justification of the sufficiency of the security measures is required.
Application notes
This family deals with measures to remove or reduce threats existing at the developer's site. Conversely, threats to be countered at the TOE user's site are normally covered in the security environment section of a PP or ST.
The evaluator should determine whether there is a need for visiting the developer's site in order to confirm that the requirements of this family are met.
It is recognised that confidentiality may not always be an issue for the protection of the TOE in its development environment. The use of the word "necessary" allows for the selection of appropriate safeguards.