e03e422c_ity_Risk_Assessment_Guidelines__3
[0] What is the plan should a security incident or breach occur? [1] Rollout management [2] As with any general issue, one or more individuals should be tasked with responding to security problems. It is important to note that these can be reported directly, or may come about as a result of the discovery of something like a new attack vector. [4] Project lifecycle processes Notification system for application-related security issues on campus [3] 
Any project should have a plan for addressing security issues, since not having a plan for these types of issues constitutes a substantial risk.
Application Security Risk Assessment Guidelines
3