A statement of what must be performed (e.g., what a system must achieve in its operational environment and throughout its lifecycle) to meet stakeholder needs for mission assurance and resilient security.
Source(s):
NIST SP 800-160 Vol. 2
[Superseded]