Across all of these life cycle phases, policy, training, tools, and metrics
are applied. Morana also recommends the use of security-enhancing life cycle
process models, such as Comprehensive Lightweight Application Security
Process (CLASP) or Microsoft’s Security Development Lifecycle (SDL), Gary