This section defines the product’s assurance boundary. It explains how to discuss standards alignment responsibly, when logical overwrite is or is not an appropriate technique, and how to build an accountable operating process around the software.
Security and compliance depend on deployment, media, authorization, evidence, and review.