lFSR with escalation. If a team does not meet all requirements and the security advisor and the product team cannot reach an acceptable compromise, Project Manager cannot approve the project, and the project cannot be released. Teams must either address whatever SDL requirements that they can prior to launch or escalate to executive management for a decision.