scope entirely is how to assure information security functions in softwarebased systems at certain Common Criteria (CC) Evaluation Assurance Levels
(EAL). Techniques, tools, etc., that focus on improving software quality,
reliability, or safety are considered in scope only when they are used with the
express purpose of improving software security.