Please forgive me if you have received this message earlier. This is significantly different.
Security has to occur at all levels.
Jonathan Jonathan, I think we need a total solution framework that shows how SET fits in it. And then we can document what exactly SET does or does not do. This is a good case where a top-down approach is necessary. Then define a clear interface between the SET portion and the other portions. If we do this we would be sure that everything is covered, and no subsystem is assuming that another subsystem is performing a certain function that is needed and no one is doing.