Reuse of Threat and Vulnerability Information (SA-15(8))

Require the developer of the system, system component, or system service to use threat modeling and vulnerability analyses from similar systems, components, or services to inform the current development process.