STIGs and Checklists, which are posted on the DISA IASE website. In addition, a
significant portion of the content of the Application Security Project’s documents
formed the basis for DHS’s Security in the Software Life Cycle, whereas NIST used
the categorization of vulnerability assessment tools in the DISA market surveys as