1. Summarize in your own words why it is beneficial to create a vulnerability map for a planned software system. What are the risks when you do not consider the inherent system vulnerabilities in planning?
5. Why is it important to establish a ranking of vulnerabilities in a system? Use example of vulnerability priorities in action.
8. What is the purpose of the complete business system specification? Why is it important from the perspective of security?
10. Would there be risks associated with an attacker getting a copy of the complete business system specification? Justify your position and provide examples to support your argument.