infrastructure), necessarily takes a much broader view in defining the scope of
its Software Assurance Program’s activities.
298 Software Security Assurance State-of-the-Art Report (SOAR)
Section 8 Observations