Why is CTAS required?
CTAS exists in order to give technical advice to Customers on the extent to which security risks have been addressed. As such, it will not deliver a simple pass / fail result but is more likely to state a degree of confidence in the effectiveness of intended security measures, along with any residual security concerns or recommendations. However, in some cases serious issues may result in a recommendation that the product or system does not appear fit for its application for HMG/CNI.
