opsec-3----Page:3
1  2  3  4  5  6  7 

Issue: Must / Should / May
We are defining Capabilities
We are not writing Requirements
What is required may vary between environments, and over time
Do we want to specify MUST, SHOULD, MAY, and so on?
Current compromise: MUST (etc..) is in the context of the capability

PPT Version