Microsoft calls the second category Security Objectives andarecommendncs o d that developers define security objectives and security requirements early in the
process. Security objectives are goals and constraints that affect the confidentiality,
integrity, and availability of the data and the application software. [171]
Significantly influencing both categories of requirements is an