are described in Section 5.2.3.1. Requirements may also be derived from
system security policy models and system security targets that describe the
system’s required protection mechanisms [e.g., the Target of Evaluation (TOE)
descriptions produced for Common Criteria (CC) evaluations].