While the guidance is applicable for all types of DoD software, the scenarios and
associated levels of precaution in the document are limited to security-enforcing
and security-relevant [61] software used under a variety of environmental and
operational conditions. However, while it is intended primarily for DoD, the