cannot contribute fully to all life cycle activities. The question of how security
knowledge is acquired by software development teams is not limited to agile
developers. Many development teams (including agile teams that are willing
to accommodate specialists) hope that by adding a security expert or two to