inputs to the software process, such as inputs driven by Federal, DoD, or
individual combatant command, service, or agency policy. The SDL view of
security risk management is technically focused, so provisions would have
to be made to ensure that security risk management within the SDL-guided