As the networking of computers continues to increase, the number of attacks on IT security rises proportionally. Since computers are becoming increasingly vital for the survival of a business and the damage caused by these attacks is growing larger, every company must consider its security requirements. However, many companies pay far too little attention to IT security, as investments in IT security are often very expensive and do not yield immediate returns. Consequently, security investments are frequently viewed merely as a cost factor. Therefore, a method is needed to assess security requirements in a comprehensible manner. This study first presents the fundamentals and then develops a method for evaluating security requirements. It begins by explaining what design patterns are.