“Development of software should begin beyond the idea for the software, should begin with an assessment of the potential risks or the potential threats.”

Transcript evidence from Tommy Ross — The BSA Framework for Secure Software.