▁CC ▁Part ▁ 2 ▁con formance ▁claims ▁ ▁CC ▁Part ▁ 3 ▁con formance ▁claims ▁ ▁P P ▁con formance ▁claims ▁– ▁strict ▁con formance ▁or ▁demon stra ble ▁con formance ▁▁ 3 . ▁Security ▁Problem ▁Definition   ▁- ▁describes ▁the ▁thre ats ▁and ▁assumptions ▁about ▁the ▁oper ational ▁environment . ▁Object ive ▁is ▁to ▁demonstrate ▁the ▁security ▁problem ▁intended ▁to ▁be ▁addressed ▁by ▁the ▁TO E ▁and ▁its ▁oper ational ▁environment . ▁ ▁Th re ats ▁– ▁an ▁ad verse ▁action ▁performed ▁by ▁a ▁threat ▁agent ▁on ▁an ▁asset . ▁ ▁Th re at ▁agents ▁are ▁described ▁by ▁aspects ▁such ▁as ▁expert ise , ▁resources , ▁opportunity , ▁and ▁motiv ation . ▁ ▁Organ iz ational ▁Security ▁Pol ic ies ▁( OS P ) ▁– ▁O SP ▁is ▁a ▁set ▁of ▁security ▁rules , ▁procedures , ▁or ▁gu idel ines ▁im posed ▁by ▁an ▁organization ▁in ▁TO Es ▁oper ational ▁environment . ▁ ▁Ass um ptions ▁– ▁made ▁only ▁about ▁the ▁oper ational ▁environment ▁of ▁the ▁TO E ▁behavior . ▁ 4 . ▁Security ▁Object ives   ▁– ▁a ▁conc ise ▁and ▁abstract ▁statement ▁of ▁the ▁intended ▁solution ▁to ▁the ▁problem ▁specified ▁by ▁the ▁security ▁problem ▁definition . ▁Each ▁security ▁objective ▁must ▁trace ▁back ▁to ▁at ▁least ▁one ▁threat ▁or ▁O SP . ▁▁ 1 ) ▁aspect ▁of ▁security ▁which ▁to ▁achieve ▁is ▁the ▁purpose ▁and ▁objective ▁of ▁using ▁certain ▁mit ig ation ▁measures , ▁such ▁as ▁confident ial ity , ▁integrity , ▁avail ability , ▁user ▁authentic ity , ▁access ▁author