and use standard libraries of security functions (authentication, cryptography),
and to perform extensive security testing that includes penetration testing,
automated vulnerability scanning, validations against security checklists, and
third-party (government and industry) security IV&V.