tools emerging to support it, and the integration of project and security risk
management for software development projects. This is an area in which the
software security and reliability consulting firm Cigital has been active for a
number of years. In the chapter “Managing Software Security Risk” in