As noted in DHS’s draft Security in the Software Lifecycle:
Determining whether the system that contains a given component,
module, or program is secure requires an analysis of how that
component/module/program is used in the system, and how the