---
id: 4281
title: "Beyond Security Requirements: Secure Requirements"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/beyond-security-requirements"
published_at: "2015-03-17T00:00:00Z"
tags: ["appsec", "best-practices", "security-engineering", "software-design", "security-requirements"]
phying_url: "https://phying.com/item/4281"
lang: en
---

# Beyond Security Requirements: Secure Requirements

## Summary

Brenda Larcom of Bishop Fox explains secure requirements versus security requirements: bolting a few constraints onto a spec written without security cannot yield a secure system.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2015-03-17T00:00:00Z
- **Original:** https://bishopfox.com/blog/beyond-security-requirements
- **Phying News:** https://phying.com/item/4281