u The basis for developing a roadmap of incremental improvements to the
processes, tools, and philosophy by which her organization develops
software. This includes a basis for planning a training/education strategy
for the organization’s software and security practitioners.