perspective, that do not adequately address software faults that cause security
vulnerabilities in the resulting system design.
The requirements allocated to software are then handed-off to software
engineering (and requirements allocated to hardware are handed-off to hardware