captured and defined as attributes of the software, but the process does not
end there. The nonfunctional security requirements need to be mapped to
functional requirements so that they can be built into the software and tested
appropriately. For example, a requirement such as “The software must not be