industries to undertake a higher “duty of care”
u Promote the compliance of software products with security
requirements before those products are released
u Make the patch-management process more secure and efficient, and