Which of the following best practices prescribed by the software development life cycle model helps developers document the areas where security controls will be needed?

$$ Security testing

B

B $$ Gather requirements

C $$ Input validation

$$ Manual peer review