ISM-0281

History

2008
In assessing a product for its suitability to meet security objectives, an agency should review all available documentation for the following: a. its applicability to the intended environment b. that the version and configuration of the product matches that of the evaluated product c. that the desired functionality was evaluated and certified d. that the level of assurance is adequate for their needs e. for any constraints or caveats DSD have placed on the product’s implementation and use.