Security is considered as part of application architecture, access control, data handling, infrastructure, and deployment requirements.
Security requirements are considered according to the nature of the application, data, users, integrations, and deployment environment. Depending on the project, this can include authentication, authorization, role-based access, secure API design, controlled data access, encryption, logging, and infrastructure-level security measures.
Specific security controls and responsibilities are determined by the application's requirements and the applicable agreement.