prepared for deployment or for approval to operate. Too often, software security
assurance is not even considered until a security incident occurs that can be
directly associated with a vulnerability in the software.
5.1.1.1 Security Issues Associated With Acquired