Writing a Security Requirements Doc for Hardware

Security that is not written down does not get built. Here is how to turn a threat model into requirements engineers can implement and test.