The software development life cycle in Guidance for Addressing Malicious
Code Risk is organized according to ISO/IEC 12207, Software Life Cycle Processes.
ISO/IEC 12207 and 15288, System Life Cycle Processes, are also being used to
define the life cycle in DoD’s systems assurance guidebook (see Section 6.1.1 for a