AISecurity, Privacy & Compliance Requirements for BA
BAs do not need to be a security engineer, but must know how to write requirements about authentication, authorization, audit log, data masking, consent, retention, PII/PHI/PCI and compliance to avoid missing the spec.

