Gall's Law applies to the security part of a project too. A complex security subsystem needs to evolve from a simpler security subsystem. Waiting until the proj

Gall's Law applies to the security part of a project too. A complex security subsystem needs to evolve from a simpler security subsystem. Waiting until the project as a whole is super complex and needs a complex security subsystem built from scratch is asking for failure.