Many organisations already have software security measures. The harder question is whether those measures are visible, repeatable, and documented.
That is one of the patterns emerging from early use of the OCCTET CRA Self-Assessment Portal.
The new OCCTET toolkit is designed
