conventional system-level countermeasures do not adequately mitigate those risks, or what alternative
countermeasures might be possible. Again, the “too late in the life cycle” problem means that even if
the accreditor does understand that the only effective mitigation for a particular risk may entail
reengineering a software component, the cost of implementing such a change when the risk is