and tools are not easily adaptable to security risk concerns.
System security risk management methods and tools would seem to be
more directly useful for software security risk management, but are limited in
96 Software Security Assurance State-of-the-Art Report (SOAR)