Gathering security requirements

Abstract

Traditionally technical requirements are gathered from business requirement document(BRD). Security requirements are often ignored or considered aftermath, the focuses on how to gather security requirements and whats details needs to be captured as part of security requirement.