obsolete. Both the Amber Book and Section B.2 of NIST’s SP-800-64, Security
Considerations in the Information System Development Life Cycle (2004)
suggest that SCM requirements include those for methods that preserve the
security of software. These methods include—