When in the Software Development Life Cycle (SDLC) MUST software security functional requirements be defined?

Question

Timothy Smith · Accepted Answer

After the business functional analysis and the data security categorization have been performed

Timothy Smith · Answer

After the system preliminary design has been developed and the data security categorization has been performed

Timothy Smith · Answer

After the vulnerability analysis has been performed and before the system detailed design begins

Timothy Smith · Answer

After the system preliminary design has been developed and before the data security categorization begins

List of questions