Assumptions and Clarification of Scope. The security aspects of the environment/configuration in which the IT product is expected to be used in should be included in this section. The section provides a means to articulate the clarification of the scope of the evaluation with respect to threats that are not countered. Users can make informed decisions about the risks associated with using the IT product. Usage, environmental assumptions, and clarification of the scope of the evaluation with respect to threats that are not countered should be stated in this section.
