Original:
ONAP MUST support Real-time detection and notification of security events.

Modified:
Req 1: MUST be able to provide the ONAP related security events to an external system
Req 2: MUST be able to collect the security events from SW defined networks that it orchestrates

TBD: define what are the security events; and potentially configurability in ONAP which types of events ONAP should collect/send out.

--------
Requirement clarification: the target of ONAP is not to be a full-fledged security analytics system