Should Exist IndexSecure software-development practices should be a normal part of every lifecycleProducers should reduce vulnerabilities through repeatable practices from design through release and maintenance.