In his paper, Security Risks: Management and Mitigation in the Software
Life Cycle, [109] David Gilliam ofThe National Aeronautics and Space
Administrations (NASA) Jet Propulsion Laboratory (JPL), describes a formal
approach to managing and mitigating security risks in the SDLC thatrequires