These changes all have the potential to invalidate at least some of the security
assumptions under which the original requirements were specified.
Software Security Assurance State-of-the-Art Report (SOAR) 191
Section 5 SDLC Processes and Methods and the Security of Software