Determine if security engineering is used when acquiring or developing protection and detection capabilities