Proposed Change: Remove the STA-11 countermeasure and replace with the ones from STA-0 (e.g. keep device up to date with security patches)
Justification:
The current STA-11 countermeasure isn't really a countermeasure, rather it's a description of the architecture of a particular TEE implementation.
General Comment
Threat ID: STA-11 Type of Comment: T
Proposed Change: Remove the STA-11 countermeasure and replace with the ones from STA-0 (e.g. keep device up to date with security patches)
Justification: The current STA-11 countermeasure isn't really a countermeasure, rather it's a description of the architecture of a particular TEE implementation.