security measurement, quality assurance, and configuration
management are performed.
Security requirements should be considered simultaneously with
other requirements, including those pertaining to functionality,