Security
Since security and access control are fundamental to the product design, it is rarely possible to have significant changes made to the product in these areas. Therefore, it is prudent to do a careful review of the security and access control fundamentals early in the evaluation process. Products that do not provide or support these areas in a fashion consistent with the organization’s needs should be dropped, even if they are functionally sound.