Section SD1.3.2 of the Standard lists key security activities that should be
subjected to QA reviews and controls during the SDLC. These activities are—
1. Assessment of development risks (i.e., those related to running a
development project, which would typically include risks associated