CISSP - Security in the software development life cycle - Security Testing and Validation