Assess threat Reach an understanding of threats to the security of the system.
Assess vulnerability Reach an understanding of the system’s security vulnerabilities.
Build assurance argument Ensure that the work artifacts and processes clearly provide the
evidence that the customer’s security needs have been met.