in software maintenance and patch generation. The impact of budget and
balancing priorities for software on its ability to achieve adequate assurance is
mentioned but not considered in depth.
Finally, the SOAR does not address how the business purpose or mission