For example, one iteration might have stories that involve authentication and authorization, while another iteration might have stories that involve input and data validation.
Stories and security frames help you chunk up security and bake it into the life cycle, while learning and responding along the way.