Security Requirements Traceability Matrix (SRTM) Glossary Definition

A Security Requirements Traceability Matrix (SRTM) is a Matrix that captures all security requirements linked to potential risks and addresses all applicable C&A requirements. It is, therefore, a correlation statement of a system's security features and compliance methods for each security requirement.

In security and compliance work, this term helps teams describe controls, risks, identity practices, standards, audits, or protective technologies. It is relevant when managing access, reducing exposure, documenting safeguards, or demonstrating accountability.