Life Cycle Phase QA Activities
Requirements Identification of acceptable levels of down time and data loss
Identification of security requirements
Design Identification and provision of countermeasures to vulnerabilities