A Formal model to aid

A formal top down model shall be presented to aid documentation and harmonization of information security requirements. The model formalizes layered development of information security, where top level abstract objectives, strategies and policies are step by step reened into concrete protection measure speciications. The model consists of static and dynamic parts, where static part refers to the organization, and dynamic part to the reenement of requirements. Major functions are horizontal and vertical harmonization functions used to transfer requirement into lower levels of abstraction, and to identify requirements of secure inter-operation of systems on each layer. Application of the model then consists of two parts: speciication of the organization and speciication of requirement harmonization functions.