For third party components, Managing Security Risks Inherent in the Use of Third-party Components paper breaks down the process and procedures developers need to test, improve and quantify the ...