are not used or even authorized.
The inadequacy of CC evaluation artifacts and C&A artifacts as the basis
for establishing software security assurance is addressed further in Section 5.1.4
on assurance cases.