existing DoD policy. In addition, the Industry Outreach tiger team produced
several documents describing DoD’s vision for improving the state of software
security assurance: a Software Assurance CONOPS (see Section 5.1.1.2.1) and (2)
Systems Assurance guidebook (see Section 6.1.1.2).