conformance even to the stated C&A criteria, let alone the assessment of the
security conflicts between components, and the impact of those conflicts on
the overall security of the system.
The C&A process does not look deep enough, or extensively at enough of