In 2004, Microsoft described its concept of security risk management,
including its own Security RMF, [106] which maps to its larger Microsoft Solutions
98 Software Security Assurance State-of-the-Art Report (SOAR)
Section 5 SDLC Processes and Methods and the Security of Software