for implemented software. It is increasingly true that software security testing is
increasing in sophistication and scope beyond simple verification against generic
application security checklists (such as those listed in Section 5.5.3.1).
8.15 Security Assurance Cases