Prior to CD-3, a final Security Vulnerability Assessment Report should be issued addressing all the safeguards and security requirements of the project. The project requirements should be satisfied by the facility design or the proposed operational features.