The journey toward secure systems: achieving assurance