November 27th, 2007

unsupervised power

(no subject)

I was reading the Common Criteria Review for a Xerox Copier, and found the following assumption:

4.2. Personnel Security Assumptions
It is assumed that all authorized administrators are properly trained, not careless, not willfully negligent, or hostile, and will follow and abide by the instructions provided by the TOE documentation.


I wonder what devices do not make that assumption in their design.