u Quality management for secure programming, including use of secure
language subsets and coding standards, and code reviews using static
and dynamic analysis tools
u Security review, inspection, and verification processes, that include