architecture models of access control and risk mitigation; these may or may
not benefit software security assurance.
One reason for this information gap is that there is very little language in
the CC or in standard C&A documentation that specifically addresses software