those requirements that are related to the security of the software and that grew
out of the threat analyses and risk management work.
A key to making the repository useful is to ensure that it stores
information at the individual requirement level so that the individual