Guidance for developing security and privacy functional requirements based on ISO/IEC 15408