A function whose correct operation is relied upon for the security policy to be upheld. Note: The term is normally used after the establishment of the evaluation baseline, to relate to representations produced subsequent to the system requirements (e.g. Functional specification and design specification. ) See also: Security Function.