Security Requirements Section

Updated 29 January 2024

The Security Requirements section consists of three or four sub-sections:

• Security Functional Requirements (SFRs)
• Security Requirements Rationale
• Security Assurance Requirements (SARs)
• Evaluation Methods/Activities

In NIAP PPs the Evaluation Activities are specified with the SFRs. In cPP the EAs are specified separately in the Supporting Document. There is not a separate XML section for EAs.

The Security Requirements Section can specified in one of three ways:

  <section title="Security Requirements" id="sec-uniqueId">

  <sec:Security_Requirements>

  <sec:secreq title="Security Requirements">

The section declaration can be followed by arbitrary HTML text or any number of other sections before the SFR section.