Developing software using secure coding rules is a good idea and is increasingly a requirement. The National Defense Authorization Act for Fiscal Year 2013, Section 933, "Improvements in Assurance of Computer Software Procured by the Department of Defense," requires evidence that government software development and maintenance organizations and contractors conform, in computer software coding, to approved secure coding standards of the Department of Defense (DoD) during software development, upgrade, and maintenance activities, including through the use of inspections and appraisals.
...
The proper application of this CERT Secure Coding secure coding standard enables a system to comply with the following requirements from the Application Security and Development Security Technical Implementation Guide, Version 4, Release 1:
...