u Provide application security subject matter expert consulting
support as directed.
After its first year, the project’s scope expanded to address the security
of web services. In years 2 and 3 of the project, the developer guidance was