and vulnerabilities associated with their system. To define requirements,
systems engineers may, in conjunction with users, perform a top-down and
bottom-up analysis of possible security failures that could cause risk to the
organization as well as define requirements to address vulnerabilities.