249Software EngineeringMediumTo specify security requirements, one should identify the risks that are to be dealt with?AFalseBTrue Correct answerA. False ExplanationExplanation: To specify security requirements, one should identify the assets that are to be dealt with.