software can be attacked as a component of any application security procurement language can help focus developers
of custom software; providing more accountability for development work because suppliers would be expected to
demonstrate that security is a core element of their application development lifecycle, from design and coding through
test.