The challenges of providing assurance evidence for COTS and reused components