...security risk assessment, for security architecture, for securecoding standards and for scans of source code for security...compliance, develop security architecture, implement securecoding standards and apply static and dynamic security testing...
http://www.computerweekly.com/blogs/david_lacey/security-solutions/