When should security risk assessment of a product occur?

When should security risk assessment of a product occur?

A.
At the disposal stage

B.
During the product life cycle

C.
At the end of a project

D.
On an as-needed basis

Explanation:
While all of these answers are right to some degree, it is best to perform risk assessments throughout the product life cycle.