7. Develop and maintain a list of all software assurance review discrepancies, risks, issues, findings, and concerns.