assurance evidence acquisition officers should seek to attain from all of their
suppliers of critical software.
124 Software Security Assurance State-of-the-Art Report (SOAR)
Section 5 SDLC Processes and Methods and the Security of Software