6.2.1. Requirements Gathering

Try these first

1. 1.

   What is requirements gathering?

   Hint

   Think about the first phase in the secure SDLC.

2. 2.

   Name one method of gathering requirements.

   Hint

   Consider how we get information from stakeholders.

3. 3.

   What is the primary goal of requirements gathering?

   • To gather user feedback
   • To identify security needs
   • To develop software

   Hint

   Focus on the aspect of security.

4. 4.

   True or False: Compliance requirements are optional in requirements gathering.

   • True
   • False

   Hint

   Think about legal regulations.

5. 5.

   Design a requirement-gathering plan for a digital payment application. What stakeholders would you involve and what requirements would you prioritize?

   Hint

   Consider who will use the application and what regulations apply.

6. 6.

   Analyze how inadequate requirements gathering could impact an application's security. Provide a recent example.

   Hint

   Reflect on any recent security incidents in technology.