assurance and the CC, not all software is eligible for CC evaluation, and in that
case, the software would not need to be evaluated by the CC resulting in a lack
of evaluation of security controls altogether.
The C&A discipline, from a security standpoint, deals with many objects