Designing an information security system

This paper describes a methodology for designing an information security system. The paper focuses on the initial stages of information system security engineering (ISSE), the upfront analysis and engineering necessary for designing security into the system. The methodology follows a system engineering process for designing security for a system through needs analysis and requirements generation.