Security Requirements Note (SRN)

Ticket / Issue ID: #### Feature / Change Title: Short, descriptive title.

---

Change Summary

Briefly describe the feature or change and its purpose.

Security Impact

• Sensitivity:
  • Low
  • Medium
  • High
• Reasoning: One line explaining the sensitivity rating.

Trust Boundaries

List affected components or interfaces (internal or external) and any sensitive data involved.

AuthN / AuthZ

• AuthN required: Yes/No
• AuthZ checks: Yes/No — If yes, which roles?

Data Handling

• Storage / encryption changes? Yes/No
• Transit encryption changes? Yes/No
• Schema changes? Yes/No

Threat Model Delta

Note any new threats introduced or existing mitigations impacted. Link to threat model delta if necessary

Secure Defaults & Config

List new config flags/env vars and confirm if defaults are secure.

Testing Notes

Security control tests added/updated? Yes/No