What assurance is required at the C2 level?
At the C2 level, the vendor must provide detailed documentation to show that the features are properly implemented. This includes design documentation, information on lifecycle management, testing procedures, and other information. In addition to providing this information, Microsoft chose to also provide full source code as part of the evaluation.
