such as documentation, which is needed for most security evaluations
and validations).
u Cannot be performed by members of the software team, and
concurrently with other life cycle activities. For example, agile methods