weaknesses of individual software components. [76]
Finally, lack of component-level detail in system C&A documentation
renders such documentation inadequate as a template after which software
security assurance cases might be modeled.