Discuss product assurance with respect to security reviews.

What will be an ideal response?

The security review process focuses on two different kinds of assurance: product assurance and process assurance. Since security reviews are primarily an oversight function, the first step is to confirm that all processes have been followed and are compliant with contractual requirements. The product must then be assured to have fully satisfied all functional and non-functional requirements specified in the contract.