whom the system must be protected.
u It requires creativity, experience, and a different mindset to define the
bad things that could happen.
u There may be security issues involving development team personnel,