Mastering Non-Functional Requirements

Checklist

The checklist for the capture of requirements is as follows:

• Are the requirements for data integrity identified?
• Are the sensitive resources in the application identified?
• Are the sets of principles for accessing the resources identified?
• Is a security policy of an application established, including entities, actions, resources and information integrity needs?
• Has a threat model to identify the security risks been identified?
• Are the stakeholders appraised, through example scenarios, so that they understand the security policy and the security risk?
• Is the security policy kept simple?
• Are security requirements reviewed with security SMEs?

The checklist for architecture definition is:

• Has each identified threat been addressed ...