¨Carry
out evaluator actions
–Verify existence, content, and presentation of evidence
–Conduct independent analysis based on developer
evidence
–Conduct independent functional and penetration tests
¨Raise
Evaluation Observation Reports
¨Document
results of evaluator actions