accomplished through a formal evaluation approach similar to the C&A
process for network systems [e.g., DoD Information Assurance Certification
and Accreditation Process (DIACAP), DCID 6/3, National Information
Assurance Certification and Accreditation Process (NIACAP), FISMA, NIST].