[RickM]

I'm implementing an exhaustive, multi-platform security checklist to be utilized by architects early on in the project lifecycle. Might as well get the security considerations in as early as possible.

Have you asked applications/systems "owners" do a security assesment and compliance plan on existing systems? Talk about a tough sell.