During the acquisition and development phase of the security development life cycle, a comprehensive risk assessment is completed, and a baseline security level is established.
A. True
B. False