Noteworthy among these are—
u Choose the Right Stuff, which entails using security as a criterion in the
selection of nondevelopmental (COTS, OSS, etc.) components
(including determination of whether a custom-developed component