Adhere to the published practices of the development project. This should ensure, at minimum, a consistent and maintainable product on which to build application security. Projects should apply a development methodology appropriate to the requirements. Neither a classic waterfall nor agile development process is appropriate in all cases. A consistency of approach ensures that design documents and code are easily accessible to all members of the project. This facilitates activities such as design review and code walk-through during the development cycle and enables traceability and debugging of problems during testing and eventual deployment. Care should be taken to ensure that.
