in isolation (and CC evaluations, as noted in Section 4.7, focus solely on the
correctness of the component’s security functionality rather than its continued
dependability in the face of threats). Examining a component in isolation cannot
reveal the security conflicts that will arise as a result of interactions between