improving the education and training of programmers on how to eliminate all-too-common errors before software
is delivered and put into operation. This aligns with the “Build Security In” approach to software assurance that
emphasizes the need for software to be developed more securely; avoiding security issues in the longer term. The CWE
provides a standard means for understanding residual risks; enabling more informed decision-making by suppliers and