Nataliia Stashevska on Non-Functional Requirements in Cybersecurity: How to Anticipate and Minimize Risks in Developing Government and Financial Platforms

Citation: Nataliia Stashevska, "Nataliia Stashevska on Non-Functional Requirements in Cybersecurity: How to Anticipate and Minimize Risks in Developing Government and Financial Platforms", Universal Library of Business and Economics, Volume 01, Issue 02.

Copyright: This is an open access article distributed under the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.

Abstract

The article discusses the methodology for integrating cybersecurity into the software development lifecycle through the lens of non-functional requirements (NFRs). The purpose of the study is to demonstrate that proactively identifying and managing NFRs is a fundamental approach to minimizing risks when creating critical platforms in the government and financial sectors. Based on the analysis of practical cases, such as MassMutual, State Street and SoftServe, the paper systematizes methods for translating regulatory norms (NYDFS, HIPAA) and industry standards (SOC, ITIL) into specific, measurable and testable non-functional requirements. The article proves that a business analyst with cybersecurity competencies ensures that the developed systems comply with security requirements by default (Security by Design), which reduces the cost of eliminating vulnerabilities and increases the overall resilience of digital assets.

Keywords: Non-Functional Requirements, Cybersecurity, Business Analysis, Risk Management, Fintech, Government Platforms, Security by Design, Compliance.

https://doi.org/10.70315/uloap.ulbec.2024.0102010