through the revision of project plans (including schedule, budget, and staffing)
and resources whenever it is discovered that security requirements are not
being effectively satisfied, to the extent that development activities should
be cancelled if security requirements still cannot be satisfied after such