Like many of Microsoft’s security processes (e.g., SDL), its security risk
management framework is strongly oriented toward turnkey software product
development, rather than software integration, so it would have to be expressly
adapted for reuse by integrators of noncommercial software systems.