of all existing or planned security protection mechanisms are documented, and
the impact of each failure on the system’s mission and stakeholders is traced.
Other techniques for developing system security requirements include
threat modeling and misuse and abuse cases. Both of these techniques