• Security Concept of Operations

• Requirements development

• Security design

• Code review

• Functional security testing

• Web application penetration testing

• Certification and Accreditation (C&A)