training, modeling, analyses, reviews, and testing to various phases of the SDLC
as it is defined by the method. A question of importance to agile advocates is
whether such a security-enhanced methodology, if it must allow for too many
extra activities, can still be considered “agile.”