The four major areas that you should consider when collecting and writing security requirements documents are:

1. User Management
2. Data Management
3. Access Control
4. Auditing

Select one (1) of these four areas and develop a report to management outlining and identifying the specific questions that would need to be asked and addressed in order to determine that adequate access controls are in place to mitigate the inherent risks associated with these major areas.