Which of the following principles are defined by the IATF model Each correct answer represents a
complete solution. Choose all that apply.

A.
The degree to which the security of the system, as it is defined, designed, and implemented,
meets the security needs.

B.
The problem space is defined by the customer’s mission or business needs.

C.
The systems engineer and information systems security engineer define the solution space,
which is driven by the problem space.

D.
Always keep the problem and solution spaces separate.