Requirement
"Security testing processes shall be defined and implemented in the development life cycle."[1]
Explanation
Software should be tested before it is deployed to the production environment this includes testing the software's security. Software security testing involves code reviews vulnerability scans and fuzz testing. OWASP provides a wide variety of information and tools for software security testing.
