Are trusted computer system standards useful for the development of systems whose criticality is other than security?

Abstract

A discussion is given on the application of the Department of Defense (DOD) trusted computer system evaluation criteria (TCSEC) and equivalent criteria to systems that must be trusted to support fail-safe (e.g., all failures leave the system in a safe state), mandatory sequence (no process is invoked out of sequence), guaranteed completion (processes are guaranteed to complete in a specific time allocation), integrity, guaranteed service, and authorized invocation (processes are guaranteed to be invoked only by authorized stimulus) policies.<>