including COTS and government-developed software utilized in critical DoD
systems and networks. As a result of its evaluation activities, the CAS hopes to
offer recommendations to the DoD, the Intelligence Community, other Federal
agencies, and industry standards bodies (e.g., ISO/IEC, OMG), with respect to