Requirements definition is concerned with identifying and
specifying the business requirements of the system chosen for
development during the feasibility study. Requirements include
descriptions of what a system should do, how users will interact
with a system, conditions under which the system will operate,
and the information criteria the system shoUd meet. The COBIT
framework defines information criteria that should be incorporated
in system requirements to address issues associated with
effectiveness, efficiency, confidentiality, integrity, availability,
compliance and reliability. The requirements definition phase
also deals with overarching issues that are sometimes called
nonfunctional requirements (e,g,, access control). There is