It should leave no question as towhether an external standard should also be applied
that will provide the coverage needed to ensure the app is being
developed to the highest possible standard of security. Many tools and
services exist that perform some level of testing to pre-determined
scripts. Thesework in conjunction with subjectmatter experts who observe
the app's source or binary code as a measure to counter the false
positives and negatives that users of these tools often experience.