operations, and generally covers security areas not addressed in ISO/IEC 12207
(e.g., the security risks inherent in system and software change control).
As the source for new security activities or artifacts to be added to
IEEE 1074-1997 Project Activities, the IEEE team that undertook revision of