Abstract: Systems and methods provide system level information technology security requirements. A requirements component outputs prompts via a user interface, including questions regarding a type of data associated with a project application, how the project application authenticates and authorizes users, a processing and storage characterization of the project application and corresponding sets of selectable responses. The component receives selections of at least one of each set of selectable responses, identifies a set of security requirements for the project application based on the selections, and outputs the set of security requirements via the user interface to assist an application team in developing the project application. The component may identify a security test associated with at least one of the set of security requirements, and output the identification of the security test.