Security requirements of systems

Objective: To ensure that security is an integral part of information systems

Security requirements should be identified and agreed prior to the development or acquisition of information systems.

Security requirements analysis and specification

An analysis of the requirements for security controls should be carried out at the requirements analysis stage of each project.