3. Knowing what to do with the results, e.g., how to transform the analysis
into a metric and/or otherwise usable decision point.
Software Security Assurance State-of-the-Art Report (SOAR) 147
Section 5 SDLC Processes and Methods and the Security of Software