A Security Requirements Traceability Matrix (SRTM) is a Matrix that captures all security requirements linked to potential risks and addresses all applicable C&A requirements.  It is, therefore, a correlation statement of a system’s security features and compliance methods for each security requirement.