for Information Technology–Software LifeCycle Processes; and 12207.2, Software
LifeCycle Processes–LifeCycle Data.The main objective of both the IEEE and ISO/
IECstandards is to define a quality-driven SDLCprocess. Neither standard contains
specific security guidance, although ISO/IEC12207 does suggestthe need for security