The default template intro to section 3 (Security Problem Description) currently says: "The security problem is described in terms of the threats that the TOE is expected to address, assumptions about its Operational Environment, and any organizational security policies that the TOE is expected to enforce."
The default template intro to section 3 (Security Problem Description) currently says: "The security problem is described in terms of the threats that the TOE is expected to address, assumptions about its Operational Environment, and any organizational security policies that the TOE is expected to enforce."
The term "operational environment" is technically not a proper noun (see e.g. references to it in https://commoncriteriaportal.org/files/ccfiles/CCPART1V3.1R5.pdf) so it does not need to be capitalized.