the software’s development team perform independent security reviews,
assessments, and/or tests of the software’s design and implementation.
As McGraw repeatedly reminds his readers, none of the 7+1 touchpoints
are sufficient on their own to achieve secure software. They are intended to be