. . "They should be grouped into categories such as security, application function, performance and more." . .