project (including managers) need at least some knowledge of security.
Unlike systems engineering, where specialist security architects can to a
great extent “overlay” security components and interfaces on top of business
logic components and interfaces, secure software engineering entails the