evaluators. The main objective for such readers is to expand their
understanding of information security risks to include a recognition
and understanding of the threats and vulnerabilities that are unique to
the software components of an information system. Specifically, this