Security as an afterthought is one reason that proper security is seldom implemented correctly. Some studies estimate that is 100 times costlier to implement a feature after the product is already in production than if the team had simply taken the time upfront to design it in.