3. Acquisition: This WG focuses on requirements for ensuring the
acquisition of secure software. This WG is looking at enhancing
software supply chain management through improved risk mitigation
and contracting for secure software. The first product of this WG is a