which are, in essence, constraints on functional requirements that result in the
necessary level of protection. Finally, the framework specifies the need to develop
“satisfaction arguments” that demonstrate the system’s ability to function
consistent with its security requirements.