Objectives
A CM system can control changes only to those items that have been placed under CM. Placing the TOE implementation representation, design, tests, user and administrator documentation, and CM documentation under CM provides assurance that they have been modified in a controlled manner with proper authorisations.
Dependencies:
ACM_CAP.3 Authorisation controls
Developer action elements:
ACM_SCP.1.1D The developer shall provide CM documentation.
Content and presentation of evidence elements:
ACM_SCP.1.1C The CM documentation shall show that the CM system, as a minimum, tracks the following: the TOE implementation representation, design documentation, test documentation, user documentation, administrator documentation, and CM documentation.
ACM_SCP.1.2C The CM documentation shall describe how configuration items are tracked by the CM system.
Evaluator action elements:
ACM_SCP.1.1E The evaluator shall confirm that the information provided meets all requirements for content and presentation of evidence.