Risks and security aspects are to be described (modeled) at the same time as the actual modeling of the development case (e.g. project).
(
)