b. Has an independent 3rd-party review been performed against the software? Did the review cover code
implementation, design, architecture, or installation settings?
d. What tools are used for automated code analysis? Static or dynamic? White box or black box?
e. Which manual analysis techniques were used?