. . . "This research and its resulting tool help organizations to build security, including privacy, into the early stages of the production and acquisition lifecycles." .