mnli premise: Reviewing and testing the security features in both commercially developed software that was being considered for use and internally developed software prior to its being moved into production. hypothesis: The software is put into production with no review or care. 