Unlike safety cases, ST documents (which are, in essence, security
cases) are not intended to demonstrate the TOE’s own inherent security
robustness, but only its conformance to security policy. For this reason,
CC STs are considered by those who are developing standards for software