Several standards which should have been included were not. Two examples of standards we had to add are:
19) 3d. ``There shall be a bug-tracking system.''
20) 4. ``Security arrangements shall ensure that, for the duration of operation, each component is the version tested and approved for use.''