NIST, Security Considerations in the Information System Development Life Cycle (NIST Special Publication 800-64) {Rev. 2) (Oct. 2008) (full-text).