Which term refers to a spreadsheet-like report that documents the security requirements that a new asset must meet?

Which term refers to a spreadsheet-like report that documents the security requirements that a new asset must meet?

• A. Security Requirements Traceability Matrix (SRTM)
• B. Stakeholders
• C. Standard
• D. Steganography

Answer: (A)

A Security Requirements Traceability Matrix is a spreadsheet-like report that documents the security requirements an asset must meet and tracks how each requirement is addressed as the asset is developed and tested. This matrix lays out each requirement, its source, the asset it applies to, and the verification status, making it easy to see whether everything needed for security is implemented and validated before deployment. It ensures nothing falls through the cracks by providing a clear, auditable link from requirements to design, controls, and testing.

Stakeholders are people with an interest in the project, not a document that records requirements. A standard is a published rule or guideline, not a per-asset tracking tool. Steganography is the practice of hiding data within other media, unrelated to documenting security requirements.