107 Gary E. McGraw (Cigital Inc.), Risk Management Framework (RMF) (Washington, DC: US CERT,
September 21, 2005).
108 Morana, Building Security into the Software Life Cycle, op. cit.
109 David P. Gilliam (NASA Jet Propulsion Laboratory), “Security Risks: Management and Mitigation in