Late appointment of SQSC/SQSS

Provided the appropriate security specialist confirms that the implementation of security measures has not been restricted due to the later stage at which their involvement was sought,Β  i.e. everything that would have been recommended can be still be implemented, then the credits can still be awarded (provided all other compliance requirements met).

Considering the security requirements at an early stage of a project should ensure that the fully range of security options is still available to the project, leading to the best solution. IfΒ adviceΒ is sought later but this does not restrict the options available, then the intent of the issueΒ can still be met.Β