Certifications are used to ensure a minimal level of guaranteed security: They are often limited to components of a system, not the entire system. So if a component is secure, the weak link could be ...