As they worked through the standard, they implemented changes to their development lifecycle, incorporating security considerations at every stage. They established a rigorous testing and validation process, ensuring that every line of code was scrutinized for potential vulnerabilities.

: The specific product or system being tested.

The certification process follows a strict lifecycle managed by a licensing scheme (e.g., NIAP in the USA, CESG in the UK, BSI in Germany).