Fourth Bullet: "• Determine how the chosen cloud requirements can be leveraged to ensure that the TOE is deployed in an environment that adequately meets the PPs assumptions and organizational security policies." While a CC certification in this case relies on cloud requirements, it has to be clear that there requirements don't replace a certification of the cloud. This was made clear in the introduction but maybe it could be repeated here for clarity.
bharveyTX
commented
3 weeks ago
Fourth Bullet: "• Determine how the chosen cloud requirements can be leveraged to ensure that the TOE is deployed in an environment that adequately meets the PPs assumptions and organizational security policies." While a CC certification in this case relies on cloud requirements, it has to be clear that there requirements don't replace a certification of the cloud. This was made clear in the introduction but maybe it could be repeated here for clarity.