# Improving the Safety and Security of Software Systems by Mediating SAP Verification
## 5 Proposed Methodology  
This study aimed to optimize software SAP verification by identifying and analyzing the factors that serve as MFs and indirectly help to improve SAP verification. Before proceeding toward finding the impact of the identified MFs on SAP verification, there is a need to identify the actions that may promote the identified MFs. Table 3 lists the MFs of software SAP and actions/measures for promoting these MFs from the existing literature on software SAP. \begin{table}
\begin{tabular}{c c c c} \hline
**MFs** & **MFs Detail** & **Actions** & **Actions/Practices to Promote MFs** \\ \hline \multirow{6}{*}{MF1} & & A1 & Use of tools to guide planning \\ \cline{3-4}  & SAP verification planning & A2 & Define acceptance criteria \\ \cline{3-4}  & and methodology & A3 & Define systematic verification methodology \\ \cline{3-4}  & & A4 & Choose a methodology that meets stakeholder demands and avoids sloppy methods \\ \cline{3-4}  & & A5 & Create and update procedures that fit the defined methodology and organizational needs \\ \hline \multirow{6}{*}{MF2} & & A1 & Execution environment simulation with virtualization technology \\ \cline{3-4}  & & A2 & Keeping the verification team up to date on the latest technology utilized in the project \\ \cline{3-4}  & SAP verification & A3 & Assembling test agents in a virtual environment \\ \cline{3-4}  & & A4 & Using automated verification \\ \cline{3-4}  & & A5 & Simulating a software’s actual behavior by mimicking actions \\ \hline \end{tabular}
\end{table} 
Table 3: MFs and the corresponding actions to promote these MFs. \begin{table}
\begin{tabular}{c c c c} \hline \hline
**MFs** & **MFs Detail** & **Actions** & **Actions/Practices to Promote MFs** \\ \hline \multirow{8}{*}{MF3} & & A1 & Keeping the software team updated on SAP \\ \cline{3-4}  & & A2 & Educating the customer on the current situation of SAP \\ \cline{3-4}  & & A3 & Regular security meetings \\ \cline{3-4}  & & A4 & Resource assignment for SAP verification \\ \cline{3-4}  & & A5 & External audit to support SAP verification \\ \cline{3-4}  & & A6 & Promoting training \\ \hline \multirow{8}{*}{MF4} & & A1 & Using techniques for the identification of SAP \\ \cline{3-4}  & & A1 & requirements \\ \cline{3-4}  & & A2 & Involving the verification team in the RE process \\ \cline{3-4}  & & A3 & Motivating the verification team to examine the \\ \cline{3-4}  & & A4 & Involving the RE team in SAP verification activities \\ \hline \multirow{8}{*}{MF5} & & A1 & Promote training \\ \cline{3-4}  & & A2 & Keeping the development team well-informed \\ \cline{3-4}  & & A3 & Regular meetings \\ \hline \multirow{8}{*}{MF6} & & A1 & Building a team with multiple skills \\ \cline{3-4}  & & A2 & Invest in training to improve team qualification \\ \cline{3-4}  & & A3 & Promoting interaction and communication \\ \cline{3-4}  & & A4 & Encourage agile/scrum \\ \cline{3-4}  & & A5 & Hire qualified people \\ \cline{3-4}  & & A6 & Leader swapping \\ \hline \multirow{8}{*}{MF7} & & A1 & Identification of suitable tools \\ \cline{3-4}  & & A2 & Encourage the use of freely available tools \\ \cline{3-4}  & & A3 & Allow the verification team to suggest tools \\ \cline{3-4}  & & A4 & Training of new tools \\ \cline{3-4}  & & A5 & Support from the tool vendor \\ \cline{3-4}  & & A6 & Using best practices toolset \\ \cline{3-4}  & & A7 & Develop a culture of tool usage \\ \hline \multirow{8}{*}{MF8} & & A7 & Define key metrics relevant to project needs \\ \cline{3-4}  & & A2 & External audit \\ \cline{3-4}  & & A3 & Monitoring plans \\ \hline \multirow{8}{*}{MF9} & & A1 & Budget forecasting \\ \cline{3-4}  & & A2 & Categorizing budget \\ \cline{3-4}  & & A3 & Budgetary control \\ \cline{3-4}  & & A4 & Keep customers informed about the benefit of \\ \cline{3-4}  & & SAP verification \\ \hline \hline \end{tabular}
\end{table} 
Table 3: _Cont._Once the MFs and the corresponding actions to promote these MFs were defined, a methodology was proposed to evaluate the SAP verification process.