Sorry...my post got cut off.  What I was attempting to ask was for requirements that sound like features like "8.1" The system shall send out a-lerts to the Cyberbank employee by email, pagers, cell phones and audible a-lerts depending on the type and severity of the error.", when and where do you define them in more detail?  Such as, the rules for when a-lerts are sent and to what equipment and what the content of the a-lerts is?