h. Which parts of the code have been most recently reviewed?
i. Which parts of the software contain legacy code whose analysis has been skipped?
4. Compiler/Environment
a. Which compiler settings are used to reduce or eliminate risk for key weaknesses (e.g. /GS switch)?