relationship between security assurance and quality assurance for software is
being considered from two directions:
u Addition of Security Risk Management to QA of Secure Software—Which
security risk management practices should be added to the QA process,