impact of those properties, threats, and vulnerabilities on the security
of the system as a whole.
u Information Assurance Practitioners: These include developers of policy
and guidance, risk managers, certifiers and accreditors, auditors, and