Security requirements checklist
security_requirements_checklistProduce a security requirements checklist for non-functional requirements, with verification methods and scope-based priorities, adding regulated and context-specific items.
Instructions
非機能要件として ID 管理すべきセキュリティ要件のチェックリストを返す。各項目に「どう検証するか」を併記する。scope の記述から公開範囲・データの機微性・規模・運用体制を読み取り、この範囲で先に着手すべき項目を理由付きで選ぶとともに、共通の一覧には無い範囲固有の観点(物理アクセス、取引先アカウントのライフサイクル、責任分界など)を足す。regulated を true にすると規制対象の案件で追加になる項目も含める(false でも、記述に個人情報・決済が出てくれば指摘する)。 / Return the checklist of security requirements to register and track as non-functional requirements, each with its verification method. Reads exposure, data sensitivity, scale, and the operating arrangement out of scope to select, with reasons, which items to start with here, and adds scope-specific concerns the generic list omits — physical access, partner account lifecycle, the responsibility split. Set regulated to true to include what regulated engagements additionally need; with false, it still flags personal data or payments if the text mentions them.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| lang | No | 出力言語 / Output language | both |
| scope | No | 対象範囲。システム名だけでなく、公開範囲・扱うデータ・保守体制まで書くと項目に優先度が付く。省略すると書き方の案内を返す / The scope. Beyond a system name, describing exposure, the data held, and the maintenance arrangement makes the items get prioritized. Omit it for guidance on what to write — 最大 20,000 文字 at most 20,000 characters | |
| regulated | No | 規制対象の案件かどうか / Whether the engagement is subject to regulation |