u One or more claims about the required security attributes of the software
u A body of evidence supporting those claims
u Arguments that clearly link the evidence to the claims.
Depending on the nature of its evidence and the persuasiveness of its