Map the business and security requirements