Until the past year or so, security and business did not often come together in the same paragraph. Well, it shouldn't be a surprise because ultimately, security is not about technology but about managing risk.
Security is present in Internet projects precisely because it's needed to mitigate some risks.
Any business has some assets to protect, and in the Internet world, it's the information assets we are concerned with. As you can see, not all assets are physical. Once the assets are identified, the next step is to identify the risks. Gathering This stage is not specific to security, but a normal step in building any project. Use cases .