methods have also proven successful in specifying and checking small, well
structured systems such as embedded systems, cryptographic algorithms,
operating system reference models, and security protocols.
5.1.3 Security Risk Management in the SDLC