designated manager such as a Designated Approving Authority (DAA).
The CC evaluation and C&A disciplines do not provide an adequate
basis for assuring software security for many reasons. Most notably, there is
a chasm between the disciplines of software assurance and the CC and C&A