Emerging Web service and business process technologies have provided technological support for business collaboration across organisation boundaries. However, security concerns have become one of the main barriers that prevent its widespread adoption. The aim of the research is to develop a security management system that covers the entire life‐cycle of secure business collaboration from strategy level, security specification from organisational level, system management from design time specification, monitoring and enforcement from run time. In this thesis, we propose a scenariobased requirements analysis approach to make the requirements clear as the first step. The description and explanation of a set of requirements are based on
modelling a variety of representational business collaboration scenarios with Petri Nets.