security issues that affect their businesses, to gauge current levels of awareness
of and activity to address those issues, and to establish a basis for identifying
and prioritizing additional needed software security practices. Of the three
most recent surveys, one was administered in the user community [represented