Which of the following is the MOST effective approach for integrating security into application development?

A. Defining security requirements
B. Performing vulnerability scans
C. Including security in user acceptance testing sign-off
D. Developing security models in parallel