In pursuit of Trusted Computer System Evaluation Criteria (TCSEC) or CC
evaluations or Federal Information Processing Standard (FIPS) 140-1 or 140-
2 certifications for their security-enforcing IT products, vendors are required
not only to submit assurance claims for those products to the independent