8500.1, Federal Information Security Management Act (FISMA),
Director of Central Intelligence Directive (DCID) 6/3].
While these certifications do not focus on software security, organizations
are beginning to include software assurance requirements in the assessment