management as the standard approach for dealing with security weaknesses
and vulnerabilities to the broad ability to routinely develop and deploy software
products that start out trustworthy, high in quality, and secure, and remain so
throughout their lifetimes.