Security Requirement

Security Requirement definition in Computer Security terms:

Acronym(s): None

Definition(s): A requirement levied on an information system or an organization that is derived from applicable laws, Executive Orders, directives, policies, standards, instructions, regulations, procedures, and/or mission/business needs to ensure the confidentiality, integrity, and availability of information that is being processed, stored, or transmitted.
Note: Security requirements can be used in a variety of contexts from high-level policy-related activities to low-level implementation-related activities in system development and engineering disciplines.
Source(s): NIST SP 800-53 Rev. 4 (Adapted from FIPS 200)

Synonym(s): Security Requirements
Requirements levied on an information system that are derived from applicable laws, Executive Orders, directives, policies, standards, instructions, regulations, or procedures, or organizational mission/business case needs to ensure the confidentiality, integrity, and availability of the information being processed, stored, or transmitted.
Source(s): FIPS 200 CNSSI 4009-2015 Requirements levied on an information system that are derived from applicable laws, Executive Orders, directives, policies, standards, instructions, regulations, procedures, or organizational mission/business case needs to ensure the confidentiality, integrity, and availability of the information being processed, stored, or transmitted.
Source(s): NIST SP 800-137 NIST SP 800-30 NIST SP 800-37 Rev. 1 NIST SP 800-39 NIST SP 800-53A Rev. 4 Requirements levied on an information system that are derived from laws, executive orders, directives, policies, instructions, regulations, or organizational (mission) needs to ensure the confidentiality, integrity, and availability of the information being processed, stored, or transmitted.
Source(s): NIST SP 800-18 Rev. 1

 

reference: CSRC Glossary