s !CCEPTANCE OF CHANGING REQUIREMENTS EVEN LATE IN THE LIFE CYCLE
necessitates constant impact analyses, and runs counter to the
need to establish an unchanging security baseline for purposes
of Certification and Accreditation (C&A) or Common Criteria