§ Identifies the requirements related to the security of the system’s data.  There may be physical security requirements, such as controlled access to a server location, as well as application-level security requirements.