A description of the security requirement.
The security domain the requirement belongs to.
The evaluation criteria used to assess compliance with this requirement.
The name of the security requirement.
The recommended remediation steps when the requirement is not met.