security assurance and application security objectives. To this end, these
agencies have established a number of programs to produce guidance and
tools, perform security assessments, and provide other forms of support
to software and security practitioners. These organizations also regularly