and understand the software security issues that they will need to
address, and subsequently develop and implement effective plans and
allocate adequate resources for dealing with those issues.
1.4 Scope