This is the first in a series of audits on software assurance. Our objective is to determine whether critical software components for selected Acquisition Category I programs received the required software assurance testing to reduce the risk of vulnerabilities in operational software.