Overview |  | Roles |  | Work Items |  | Views |  | CMMI |  | Index |  | Glossary |

Project Portal
| ### Next Steps Define Safety Requirements |
| Define Security Requirements ( 3 : RD : 2 : 2.1 ) ( 3 : RD : 3 : 3.2 ) Solution Architect
Activity: Define Security Requirements
Solution Architect
Business Analyst
|  |  |  | Planning |  |
|  | Participating Roles Responsible: Solution Architect Business Analyst Accountable: Solution Architect Consult: Subject Matter Expert Informed: Development Manager Project Manager Test Manager Release Manager
### Overview Security requirements specify steps taken to protect the organization's information assets. They must take into consideration any industry-specific regulatory requirements. These requirements deal with identity and authentication, access control and authorization, accounting and auditability, and data integrity and privacy. # Entry Criteria User Scenarios Complete User scenarios have been created, reviewed, and approved. Quality of Service Requirements Complete Quality of service requirements have been created, reviewed, and approved. Domain Model Complete The domain model has been created, reviewed, and approved. When: After the input requirements are available. # Sub-Activities
1 | Analyze Input Requirements | Analyze the scenarios, quality of service requirements, and any industry-specific regulations for input requirements specific to security.
2 | Draft Security Requirements | Create a draft of the security requirements from initial input.
3 | Review Security Requirements | Review the draft security requirements. Update the requirements based on feedback.
4 | Baseline Requirements | Baseline the reviewed and approved security requirements for the project. This baseline is used in change management and revising project estimates during replanning.
# Exit Criteria
| The security requirements are reviewed, approved, and baselined.
© 2005 Microsoft Corporation. All rights reserved. MSF for CMMI Process Improvement: 1.00.0000.00 |