14. An apparatus for managing and analyzing security requirements in reusable models, the apparatus comprising: at least one storage device; a functional model reader configured to read at least one functional model stored on the storage device; a security implementation model reader configured to read at least one security implementation model stored on the storage device; and a requirement model reader configured to read at least one requirement model stored on the storage device; wherein, to at least partially automatically relate the read functional model, the read security implementation model, and the read requirements model and analyze a correspondence between the functional model, the security implementation model, and the requirement model, the correspondence indicates that requirements defined in the requirement model match with security objectives implemented by controls defined by the security implementation model; and wherein electronic data is at least partially automatically generated that represents evidence based on the analysis of the correspondence.
14. An apparatus for managing and analyzing security requirements in reusable models, the apparatus comprising: at least one storage device; a functional model reader configured to read at least one functional model stored on the storage device; a security implementation model reader configured to read at least one security implementation model stored on the storage device; and a requirement model reader configured to read at least one requirement model stored on the storage device; wherein, to at least partially automatically relate the read functional model, the read security implementation model, and the read requirements model and analyze a correspondence between the functional model, the security implementation model, and the requirement model, the correspondence indicates that requirements defined in the requirement model match with security objectives implemented by controls defined by the security implementation model; and wherein electronic data is at least partially automatically generated that represents evidence based on the analysis of the correspondence. 19. The apparatus according to claim 14 , further comprising: a current evidence normalizer configured to normalize an evidence; a change detector configured to identify a difference between at least two normalized evidence versions; and a change policy decider configured to decide whether changes are significant and to provide an operator with information based on identified differences between the at least two normalized evidence versions.