in software are reduced to such a degree that justifiable confidence in the
software’s security and other required properties can be attained. These means
range from to defining new criteria and procedures for how the software is
acquired, to changing the processes, methods, and tools used to specify, build,