> I used consultant-approved methods to gather data on the security
requirements of key applications and helped identify gaps in the
discovery and defining of their information protection
requirements. A comprehensive application security assessment questionnaire was used to
understand the threat, security context and
environmental constraints for each application.