As industries, faced with challenges related to the cybersecurity of connected systems and devices, create new standards that help address these challenges they often only articulate the best practices for secure software development. Notably missing is a standardized method that validates and verifies the security of systems or products created through such practices.