SSDM defines a secure four-phase workflow within the software
engineering process:
1. Security Training—Provide stakeholders adequate security education in
software development. Training concepts include security awareness,