security measurements (Section 5.2)
2. Architecture and Design—Threat modeling, architecture and design
security patterns, security test planning, architecture and design
security reviews, and security measurements (Section 5.3)