the Applications Division of the DISA Center for Information Assurance
Engineering (CIAE), to insert application security best practices into DISA’s (and
its contractors’) web and database application development processes. The
project had multiple objectives: