responsibility for not specifying security requirements in the first place,
138 Software Security Assurance State-of-the-Art Report (SOAR)
Section 5 SDLC Processes and Methods and the Security of Software
even when the intended execution environment for the software is