During C&A, the holistic view of the system and the consideration of
individual components as black boxes mean that the certifier focuses mainly
on each component’s external interactions with its host platform, connected
network, and users, and to a lesser extent with the other black boxes that