Software engineers have found checklists useful in conducting reviews ever
since, at least, Michael Fagan [279] invented formal inspections. Gary McGraw,
in Software Security, recommends the checklists in Jay Ramachandran’s
Designing Security Architecture Solutions (John Wiley and Sons, 2002) and