A generic security test suite might include security test cases to validate both positive and negative requirements for security controls such as: A good practice for developers is to build security test cases as a generic security test suite that is part of the existing unit testing framework.