build defenses against them, but the threat environment faced by the
delivered system will be different from the threat environment existing at
the time of requirements development because the threats are evolving.
u The users who help define the system are not typically the abusers from