Optimal Output is CC PP
¨ User should focus on needs, not
implementation
¨ PPs offer more flexibility in requirements
packaging
¨ If an existing secure system is being
upgraded, a ST might be appropriate
600.436 High-
Assurance Systems
Fall 01/Introduction
20