1.1PurposeandScope ThepurposeofthisguidelineistoassistagenciesinbuildingsecurityintotheirITdevelopmentprocesses.Thisshouldresultinmorecost-effective,risk-appropriatesecuritycontrolidentification,development,andtesting.Thisguidefocusesontheinformationsecurityc