Who needs CTAS?
CTAS is only applicable for Customers in government departments (or potentially in other parts of the Critical National Infrastructure). The evaluation is paid for by a Sponsor, who may often be a developer of the product or system or a service provider. (Note that the terms for Customer and Sponsor can often be confused).