Appendix A List of Acronyms

AI	Artificial Intelligence
AI BOM	Artificial Intelligence Bill of Materials
AKV	Azure Key Vault
API	Application Programming Interface
App	Application or Applet
AzDO	Azure DevOps
CI/CD	Continuous Integration/Continuous Delivery
CLI	Command Line Interface
CSPM	Cloud Security Posture Management
DAST	Dynamic Application Security Testing
DevOps	Development Operations
DevSecOps	Secure Development Operations
GHAS	GitHub Advanced Security
GHAzDO	GitHub Advanced Security for Azure DevOps
HSM	Hardware Security Module
IaC	Infrastructure as Code
IAST	Interactive Application Security Testing
ICAM	Identity Credential Access Management
ID	Identity
IDE	Integrated Development Environment
IoT	Internet of Things
MDC	Microsoft Defender for Cloud
MLOps	Machine Learning Operations
NCCoE	National Cybersecurity Center of Excellence
NIST	National Institute of Standards and Technology
NVD	National Vulnerability Database
OSV	Open Source Vulnerability
OT	Operational Technology
PDP	Policy Decision Point
PEP	Policy Enforcement Point
PO	Prepare the Organization
PS	Protect Software
PW	Produce Well-Secured Software
RV	Respond to Vulnerabilities
SAST	Static Application Security Testing
SBOM	Software Bill of Materials
SCA	Software Composition Analysis
SCM	Source Code Management
SDK	Software Development Kit
SDLC	Software Development Lifecycle
SIEM	Security Information and Event Management
SLSA	Supply- chain Levels for Software Artifacts
SOAR	Security Orchestration, Automation and Response
SP	Special Publication
SSDF	Secure Software Development Framework
ZTA	Zero Trust Architecture