addresses concerns about malicious developers, administrators, and users,
and the need to reduce uncertainty and provide an explicit basis for justifiable
stakeholder confidence in software, as well as decision making about software
acquisitions and engineering approaches. Intended for multiple audiences,