Problem
What is the role of the "Need to Acquire" document in the assurance of a secure product? Specifically, how does initial planning for the way that the product will fit within the overall system environment impact the selection of how the actual product acquisition process will be conducted?