Analysis the priority of security requirement items for the process improvement by ISO/IEC 15504 and ISO/IEC 15408

A software process can be characterized as the ISO/IEC 15504. A common process framework is established by defining a small number of framework activities that are applicable to all software projects, regardless of their size or complexity. There are many risk items of the project development that cause the process maturity level occurring in the quality problems during process management and project progress. This paper designs the opportunity tree that management of security requirement the current domain and their problems solution as well. And this paper reference ISO/IEC 15504 and ISO/IEC 15408 as the international standard. In this paper, we propose a security requirement handing based approach considering security when developing system.