5.2.2.1 Where Do Software Security Requirements Originate?
DHS’s Software Assurance (CBK) describes several categories of needs that
should be mined for security requirements:
u Stakeholders’ Security-Related Needs—