There are lots of security term and definition pairs. What definitions does the stakeholder need to filter out before distributing a definition set to the RE team?
You should include all definitions that are relevant to the project, even if they are common terms. For example, different stakeholders have different ideas about what “availability” means, even though it is a common term. The objective here is to agree on definitions for terms that might be needed on the project, not for every security term that exists. Some of our case study reports show the definitions selected by clients.
Related Questions
- Have we appropriately tailored the proposed definition of the term "off-balance sheet arrangement" and the proposed disclosure to filter out disclosure that is unimportant to investors?
- There are lots of security term and definition pairs. What definitions does the stakeholder need to filter out before distributing a definition set to the RE team?
- What are the long term national security consequences of transitioning from manufacturing to software and services?