Interactive Application Security Testing (SA-11(9))

Require the developer of the system, system component, or system service to employ interactive application security testing tools to identify flaws and document the results.