Why are system requirements regarded as primary project artifacts when beginning software work?

Cloud Security Command Center is a specific security management service (e.g., Google Cloud's product) and is irrelevant to the general concept of system requirements as project artifacts.

System requirements are primary project artifacts because they precisely define the specific operations, functions, and behaviors that the software application must perform to meet user needs and business objectives. They serve as the baseline for all development, design, and testing efforts.

Describing the adversarial and operational environment is typically part of threat modeling or a risk assessment, which informs security requirements, but it is not the core definition of system requirements themselves.

Prescribing implementation techniques and development steps falls under system design and architecture, not the initial system requirements which focus on what the system should do, not how.