The role of transparency in establishing security assurance