Ensures the delivered software will have all the
security features and properties that were specified
Change control and management Analyzes how proposed changes may affect security,
directly or via a ripple effect