...
Guidelines in this standard are classified into three levels (see Priority and Levels). Emphasis should be placed on conformance Level 1 (L1) rulesguidelines. Software systems that have been validated as complying with all Level 1 rules guidelines are considered to be L1 Conforming. Software systems can be assessed as L1, L2, or fully conforming depending on the set of rules guideline to which the system has been validated.
...
Conformance to secure coding rules guidelines must be demonstrated to claim compliance with this standard unless an exceptional condition exists. If an exceptional condition is claimed, the exception must correspond to a predefined exceptional condition and the application of this exception must be documented in the source code.
...