Unlike ISO/IEC 12207, IEEE 1074-2006 includes documentation of security
risks and solutions throughout the SDLC; to do so, it leverages Common
Criteria assurance principles and assets, defines a security profile for evaluation
of software integrity as well as documentation needed to ensure secure