I’m trying to learn for my Software Development class and I’m stuck. Can you help?
In addition, you will investigate the use/misuse of PII data. As mentioned in the NIST SP800-122 document, PII data can be used to distinguish an individual is to identify an individual. Some examples of information that could identify an individual include, but are not limited to, name, passport number, social security number, or biometric data. This week several documents were provided that described the requirements elicitation and gathering process. Several techniques were listed for gathering security requirements including misuse/abuse cases, general processes, attack patterns and architectural risk analysis. For this assignment we focus on misuse/abuse cases.



