Annex, which helps “software developers and their clients negotiate and
capture important contractual terms and conditions related to the security of
the software to be developed or delivered.” [88] The Contract Annex provides
a sample contract that defines the life cycle activities, security requirements,