Business Environment

Security, health & safety, regulatory, legal, contractual, and data privacy requirements.

Confirming (identifying and validating) the applicable compliance requirements for the project.

Because it is often legally mandated and its breach carries legal, financial, and human-safety consequences.

Internal policy, external regulation, and industry standard.

Internal policy is set by the organization itself; external regulation is imposed by government/law and is mandatory regardless of the org.