JUSTIFYING DIGITAL COTS COMPONENTS WHEN COMPLIANCE