“Security is, according to the ISO 25000 standard, an aspect of the quality of software.”

Transcript evidence from Grant Ongers — Gamification of threat modeling.