Objectives
The requirements for delivery call for system control and distribution facilities and procedures that provide assurance that the recipient receives the TOE that the sender intended to send, without any modifications. For a valid delivery, what is received must correspond precisely to the TOE master copy, thus avoiding any tampering with the actual version, or substitution of a false version.
Component levelling
The components in this family are levelled on the basis of increasing requirements on the developer to detect and prevent modifications to the TOE during delivery.