“If you're dealing like a 3-tier web application in some environment, it's going to be having a completely different completely different resilience and security requirement if you change that environment.”

Transcript evidence from Mehran Koushkebaghi -- Security as a Systemic Concern: How to develop Anti-Requirements.