Apply when performing a security review, checking for vulnerabilities, or implementing authentication and authorization logic.