and integration of appropriate levels of security controls into software and
systems. The new standard adds a small number of security-focused activities
to the SDLC process defined in the 1997 version of the standard.
IEEE Std. 1074-1997 formed the basis for developing ISO/IEC12207.1, Standard