system, but they cannot be used in validating a system. Validation shows that a
system will satisfy its operational mission. Verification shows that each step in
the development satisfies the requirements imposed by previous steps.
DHS’ Security in the Software Life Cycle observes that because software