To date, the only way that proponents of security-enhancing agile methods
appear to have determined that their particular agile development method of
choice could be effectively adapted to achieve software security objectives was
through trial and error, i.e., they adapted the agile method by adding security