Assessing Security Requirements for Controlled ...