components of COTS-based systems, the C&A documents required for DIACAP
[which, because its activities begin earlier in the system’s life cycle than did
their counterparts in DoD Information Technology Security Certification
and Accreditation Process (DITSCAP), is thought to more strongly influence