Skip to content

Security Requirement

What is Security Requirement?

A condition or capability that a system must possess to satisfy a security policy, standard, or contractual obligation.

Information Security

Each of these is named in at least one of the same controls as security requirement. The number is how many controls name both.

What the standards actually require on security requirement

Requirements naming security requirement across 6 standards, quoted from the control text.

ISO 27002:202220 controls

Information security requirements are to be identified, specified and approved whenever applications are developed or acquired. Purpose: leave no security requirement unidentified or unaddressed when an application is built or bought.

iso-27002-2022::8.26 · Application security requirements →
IEC 624439 controls

A process shall be employed to ensure security requirements are reviewed, updated and approved by personnel with the security expertise, product management and customer perspectives, before design proceeds.

iec-62443::SR-5 · Security requirements review →

When new systems are developed or existing ones changed, security requirements are defined clearly and applied, taking account of legal requirements, current vulnerabilities and confidentiality, integrity and availability.

south-korea-cloud-security-assurance-program-csap::13.1.1 · Defining security requirements →
ISO 27001:20137 controls

Requirements related to information security are included in the requirements for new information systems and for enhancements to existing ones.

iso-27001-2013::A.14.1.1 · Information security requirements analysis and specification →
NIST SP 800-2187 controls

Track and maintain the software's security requirements, risks, and design decisions.

SP800-218-PW.1.2 · Track Security Requirements, Risks, and Decisions →

Questions people ask about security requirement

What is Security Requirement?
A condition or capability that a system must possess to satisfy a security policy, standard, or contractual obligation.
Why is Security Requirement important for compliance?
Security Requirement is a key concept in Information Security. Understanding security requirement helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Security Requirement?
Security Requirement appears in the requirement text of ISO 27002:2022, IEC 62443, South Korea Cloud Security Assurance Program (CSAP), Australian Energy Sector Cyber Security Framework (AESCSF), ISO 27001:2013. Across these standards we have identified 59 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Security Requirement?
Explore our compliance framework pages to see how security requirement applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Security Requirement applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.