business impacts can provide input to the requirements specification and define
the context for the security aspects of the software’s architecture and design. The
software’s architectural risk assessment then refines the system risk assessment
by analyzing how well the software addresses the system risks, suggesting