3. Security Specification—Lists attacks, defines potential protection
measures against issues such as development errors, guides security
implementation, assists monitoring of security postures, and helps
make system adaptable to the changing landscape of security.