Definition of requirements and security requirements based on the goal and sub-goals defined, and the context of the system.