scope:

The present document is intended to encourage development and adoption of 'secure by default' platform security technologies by showing how they can be used to effectively solve real business problems, and improve the usability of secure services. The intended audience is decision makers rather than engineering teams where they are deciding which features to include in a new platform, or which are required as part of a procurement activity. The present document focuses on a structure for describing identified business needs/issues for a particular set of users; detailing the characteristics needed of possible solutions, and finally identifying existing or emerging standards which provide those characteristics.