development of security test plans, white and black box testing, and
test defect reviews/vulnerability analyses by defect type
u Removal of vulnerabilities from legacy software.
TSP-Secure adopters attend an SEI workshop in which they are introduced