Stakeholder security requirement