u Help establish a set of defined steps and processes
u Facilitate management oversight for secure programming practices
u Help in the recognition of design patterns for vulnerabilities
u Provide for security verification that security mechanisms have been