Security Considerations in the Information System Development Life Cycle: Recommendations of the National Institute of Standards and Technology