functionality (i.e., functional requirements that are not satisfied in the
implemented system). Can this already-accepted accountability be
expanded to include comparable failures in security (i.e., security was
specified, but not achieved in the implemented system)? What about