information, risk managers have determined that, to the extent that the
software itself might be targeted to access otherwise inaccessible
data, the availability and integrity of the software must be preserved
and protected against compromise.