ACM_AUT.2 Complete CM automation
Objectives
In development environments where the configuration items are complex or are being developed by multiple developers, it is difficult to control changes without the support of automated tools. In particular, these automated tools need to be able to support the numerous changes that occur during development and ensure that those changes are authorised. It is the objective of this component to ensure that all configuration items are controlled through automated means.
Providing an automated means of ascertaining changes between versions of the TOE and identifying which configuration items are affected by modifications to other configuration items assists in determining the impact of the changes between successive versions of the TOE. This in turn can provide valuable information in determining whether changes to the TOE result in all configuration items being consistent with one another.
Dependencies :
ACM_CAP.3 Authorisation controls
Developer action elements :
ACM_AUT.2.1D The developer shall use a CM system.
ACM_AUT.2.2D The developer shall provide a CM plan.
Content and presentation of evidence elements :
ACM_AUT.2.1C The CM system shall provide an automated means by which only authorised changes are made to the TOE implementation representation, and to all other configuration items.
ACM_AUT.2.2C The CM system shall provide an automated means to support the generation of the TOE.
ACM_AUT.2.3C The CM plan shall describe the automated tools used in the CM system.
ACM_AUT.2.4C The CM plan shall describe how the automated tools are used in the CM system.
ACM_AUT.2.5C The CM system shall provide an automated means to ascertain the changes between the TOE and its preceding version.
ACM_AUT.2.6C The CM system shall provide an automated means to identify all other configuration items that are affected by the modification of a given configuration item.
Evaluator action elements :
ACM_AUT.2.1E The evaluator shall confirm that the information provided meets all requirements for content and presentation of evidence.