A new IT system is to be implemented, a machine is to be procured, or a service provider is to be commissioned. Before anyone starts programming, building, or consulting, a clear document is needed: the Requirements Specification. It is the foundation of every successful commission and ensures that the client and the contractor have the same understanding of the requirements.
Nevertheless, in practice, the requirements specification is surprisingly often neglected. The consequences are severe: misunderstandings, change requests, budget overruns, and projects that miss the actual need. In this article, we show you how to create a professional requirements specification, give you a ready-to-use template to adopt, and illustrate the structure using a concrete practical example.
What is a Requirements Specification?
The Requirements Specification (German: Lastenheft) is a document that describes the totality of all requirements of the client for a project, product, or service. It answers the central question: What is to be achieved?
DIN 69901-5 defines the requirements specification as the "totality of the client's requirements for the deliveries and services of a contractor". It deliberately focuses on the what, not the how. The requirements specification describes the desired results and functions from the client's perspective, without prescribing a technical solution.
Core Principle: The requirements specification describes requirements in a solution-neutral manner. It defines what the system should be able to do, not how it is to be technically implemented. The technical solution belongs in the contractor's functional specification.
A good requirements specification serves several purposes simultaneously: It is the basis for tenders, a contractual component, a communication tool between business and IT sides, and the basis for later acceptance. Without a requirements specification, there is no measurable basis to judge at the end whether the delivered result meets expectations.
Requirements Specification vs. Functional Specification: Who Creates What?
One of the most common confusions in project management concerns the difference between a requirements specification and a functional specification. Both documents are closely interlinked but have fundamentally different perspectives and responsibilities.
| Criterion | Requirements Specification | Functional Specification |
|---|---|---|
| Created by | Client (Business Side) | Contractor (Implementer) |
| Perspective | What is to be achieved? | How will it be implemented? |
| Content | Requirements, Objectives, Framework Conditions | Technical Solution, Architecture, Implementation Details |
| Language | Business-oriented, solution-neutral | Technical, solution-specific |
| Timing | Before the tender / commission | After commission, before implementation |
| Binding Nature | Basis for offers and contracts | Basis for acceptance and tests |
| Standard | DIN 69901-5 | DIN 69901-5, VDI/VDE 3694 |
In practice, the process is as follows: The client creates the requirements specification and sends it out as tender documentation or gives it to the internal implementation team. The contractor analyzes the requirements specification and, based on it, creates the functional specification, in which they describe how they intend to technically implement the requirements. The functional specification is then approved by the client before the actual implementation begins.
Structure of a Requirements Specification: The 10 Chapters
A complete requirements specification follows a proven structure. The following ten chapters form the standard structure you can use for most projects. Depending on the project type and industry, you can expand or adapt individual chapters.
1. Introduction and Objectives
The first chapter provides the context: Why is this project being started? What is the occasion, which problem is to be solved? This is also where the project name, document version, and contact persons belong. After reading this chapter, the reader should understand what it is about and why the undertaking is important.
2. Current Situation / As-Is State
Describe the current state: Which systems, processes, or structures exist today? What problems and weaknesses are there? Without an honest analysis of the as-is state, requirements cannot be formulated meaningfully. This section creates the basis on which all further requirements are built.
3. Target State and Goals
Here you describe the desired target state. What should the world look like after successful implementation? Formulate the goals according to the SMART principle: specific, measurable, attractive, realistic, and time-bound. Avoid vague formulations like "The system should be user-friendly" and instead write concretely what user-friendliness means in this context.
4. Functional Requirements
The heart of the requirements specification: Which functions must the system, product, or service provide? Each requirement should have a unique ID (e.g., FA-001), a clear description, and a priority (Must, Should, Could). Functional requirements describe what the system should do, for example: "The system must allow filtering orders by date, status, and customer number (FA-012)."
5. Non-Functional Requirements
In addition to functions, there are quality requirements: Performance (e.g., response times under 2 seconds), availability (e.g., 99.5% uptime), security (e.g., two-factor authentication), scalability (e.g., up to 10,000 concurrent users), and usability (e.g., operable without training). These requirements are often forgotten in practice but are crucial for user satisfaction.
6. Framework Conditions and Interfaces
What technical, organizational, and legal framework conditions exist? Must the system be integrated into an existing IT landscape? Which interfaces are required (e.g., to ERP, CRM, email)? Are there regulatory requirements such as GDPR, industry standards, or internal compliance guidelines? This is also where constraints like the predefined operating environment belong.
7. Acceptance Criteria
Define measurable criteria based on which it will be checked at the end whether the requirements have been met. Without clear acceptance criteria, every project ends in endless discussions about whether the result is "good enough". Ideally, you formulate a concrete acceptance criterion with a test case for each must-have requirement.
8. Timeframe and Milestones
When should the project start, when should it be finished? Are there interim deadlines or external deadlines (e.g., regulatory deadlines, trade fairs, seasonal requirements)? Define the most important milestones and the desired timeframe. Note: The requirements specification sets the timeframe; the contractor checks feasibility in the functional specification.
9. Budget and Resources
Provide a budget framework or at least an order of magnitude. Without budget information, no contractor can submit a realistic offer. Also describe which internal resources are available (e.g., a project manager, test resources, infrastructure). Some organizations deliberately do not disclose the budget to obtain market-appropriate offers. In this case, you should at least indicate the budget class.
10. Appendices and Glossary
Collect supplementary documents here: process diagrams, screenshots of the as-is system, data models, glossary for technical terms. A glossary is especially important if the client and contractor come from different professional domains. Every term should be defined uniformly to avoid misunderstandings.
Requirements Specification Template: Practical Sample to Adopt
You can use the following template as a starting point for your own requirements specification. Adapt the contents to your project and add missing information. The structure follows the ten chapters described above.
Requirements Specification Template
1. Introduction and Objectives
Project Name: [Project Name] Version: [1.0] | Date: [DD.MM.YYYY] | Author: [Name, Department] Occasion and Motivation: [Why is the project being started? Which problem is to be solved?] Project Objective: [What should be achieved in the end? Formulate SMART.]2. Current Situation (As-Is State)
Current Systems / Processes: [Description of the existing solution] Problems and Weaknesses: [What doesn't work or works poorly today?] Affected User Groups: [Who works with the current system?]3. Target State and Objectives
Target State: [How should the solution look after implementation?] Success Criteria: [How will success be measured?]4. Functional Requirements
- FA-001: [Requirement] | Priority: Must / Should / Could
- FA-002: [Requirement] | Priority: Must / Should / Could
- FA-003: [Requirement] | Priority: Must / Should / Could
5. Non-Functional Requirements
- NFA-001: Performance: [e.g., response time < 2 seconds]
- NFA-002: Availability: [e.g., 99.5% uptime]
- NFA-003: Security: [e.g., encryption, authentication]
- NFA-004: Scalability: [e.g., up to X concurrent users]
6. Framework Conditions and Interfaces
Technical Framework Conditions: [Existing IT landscape, operating systems, browsers] Interfaces: [ERP, CRM, email, external APIs] Regulatory Requirements: [GDPR, industry standards, compliance]7. Acceptance Criteria
Criterion 1: [Measurable condition for acceptance] Criterion 2: [Measurable condition for acceptance] Testing Procedure: [How will it be tested? Who tests?]8. Timeframe and Milestones
Project Start: [DD.MM.YYYY] | Planned End: [DD.MM.YYYY] Milestone 1: [Description] by [DD.MM.YYYY] Milestone 2: [Description] by [DD.MM.YYYY]9. Budget and Resources
Budget Framework: [Amount or order of magnitude] Internal Resources: [Project Manager, Subject Matter Experts, Test Team]10. Appendices and Glossary
Appendix A: [Process diagrams, screenshots, data models] Glossary: [Technical terms and their definitions]Requirements Specification Example: Employee Portal
To make the structure tangible, we show here an excerpt from a realistic requirements specification for the introduction of an employee portal in a medium-sized company with 500 employees.
Requirements Specification: Introduction of Employee Portal (Excerpt)
1. Introduction
Müller GmbH (500 employees, 3 locations) plans to introduce a central employee portal. The goal is to digitize all HR self-service processes and improve internal communication. Currently, vacation requests, sick notes, and payrolls are handled via paper forms and email, leading to high administrative effort and long processing times.
2. As-Is State
Vacation requests: Paper form, lead time 3-5 working days. Sick notes: Via email to supervisor and HR, no central recording. Payrolls: Via post, costs approx. 8,400 EUR/year. Internal news: Via email distribution list, no confirmation of reading.
3. Target State and Goals
All HR self-service processes should be handled through a central, web-based portal. Employees should be able to independently submit vacation requests, report sick leave, access pay slips, and maintain personal data.
- Goal 1: Reduce manual HR administrative tasks by 60%
- Goal 2: Processing time for vacation requests under 24 hours
- Goal 3: Paperless handling of all standard processes by Q4 2026
- Goal 4: Employee satisfaction with HR services from 3.2 to 4.5 (scale 1-5)
4. Functional Requirements (Excerpt)
- FA-001: The portal must enable digital vacation request submission with an approval workflow. | Priority: Must
- FA-002: Employees must be able to retrieve their payrolls from the last 24 months as PDFs. | Priority: Must
- FA-003: The portal must offer a news section with read confirmation. | Priority: Should
- FA-004: Supervisors must be able to view absence overviews of their team. | Priority: Must
- FA-005: Employees must be able to change personal data (address, bank details) themselves, with approval by HR. | Priority: Should
5. Non-Functional Requirements (Excerpt)
- NFA-001: Page load time maximum 3 seconds with 100 concurrent users.
- NFA-002: Responsive design for mobile use (smartphone/tablet).
- NFA-003: GDPR-compliant data storage, server location Germany.
- NFA-004: Single Sign-On via existing Active Directory.
6. Framework Conditions and Interfaces
- Integration with existing Active Directory (Microsoft Entra ID) for Single Sign-On
- Interface to SAP HR module for master data synchronization
- Interface to payroll system (DATEV) for pay slip generation
- Email notifications via Microsoft Exchange Server
- GDPR-compliant data storage, server location Germany
- Hosting: Cloud (SaaS) or On-Premises, decision in specification document
7. Acceptance Criteria
- All mandatory requirements (FA-001, FA-002, FA-004) functional and tested
- Successful pilot operation with 50 users over 4 weeks without critical errors
- Page load time under 3 seconds with 100 concurrent users (load test)
- Positive result from external GDPR audit
- Training of at least 10 HR key users completed
8. Timeline and Milestones
- Project start: February 2026
- Milestone 1: Concept approval and vendor selection by April 2026
- Milestone 2: Pilot operation with 50 users (Munich location) by June 2026
- Milestone 3: Rollout to all 3 locations by August 2026
- Go-Live: September 2026 (Q3)
- Hypercare phase: 4 weeks of intensive support after go-live
9. Budget and Timeframe
Budget framework: 80,000-120,000 EUR (one-time) plus max. 1,500 EUR/month ongoing costs. Desired go-live: Q3 2026. Milestone 1: Concept approval by April 2026. Milestone 2: Pilot operation with 50 users by June 2026.
This example shows how concretely and measurably requirements should be formulated. Each requirement has an ID, a clear description, and a priority. The contractor can create a reliable offer based on this.
5 Typical Mistakes in Requirements Specifications
The following mistakes are encountered again and again in practice. Avoid them to put your project on a solid foundation from the start.
-
Describing a solution instead of a requirement The most common mistake: The requirements specification describes a technical solution instead of a business requirement. Instead of "The system uses a PostgreSQL database," it should say: "The system must be able to store data persistently and retrieve it within 2 seconds." The choice of database is the contractor's responsibility.
-
Forgetting non-functional requirements Functional requirements usually get enough attention. But performance, security, scalability, and usability are regularly forgotten. This comes back to haunt you at the latest during operation, when the system functions but is unbearably slow or has security gaps.
-
Unclear or ambiguous formulations Terms like "user-friendly," "fast," or "modern" are subjective and not measurable. Every requirement must be formulated so that two different people understand it the same way. Use numbers, examples, and clear definitions. If you mean "fast," write "response time under 2 seconds for 95% of all requests."
-
Not involving stakeholders The requirements specification is often written by a single person without consulting the actual users and stakeholders. This leads to requirements that miss the real need. Conduct interviews with all relevant user groups and have the requirements specification reviewed before finalization.
-
No prioritization of requirements If all requirements are equally important, none are important. Without prioritization (Must/Should/Could), the contractor cannot make sensible decisions about what to implement first in case of budget constraints or time pressure. The MoSCoW method (Must, Should, Could, Won't) has proven itself in practice.
From Requirements Specification to Project Plan: AI-Supported Further Processing
The requirements specification is created, the requirements are clearly formulated. But what comes next? The next step is transferring the requirements into a concrete project plan with phases, tasks, milestones, and a timeframe. This is precisely where artificial intelligence comes into play.
PathHub AI can automatically translate your requirements from the requirements specification into a structured project plan. The AI analyzes the functional and non-functional requirements, identifies dependencies, and creates a realistic schedule with phases and work packages. This not only saves time but also avoids the typical errors of manual conversion: forgotten requirements, unrealistic time estimates, and missing dependencies.
Practical Tip: Describe your project in PathHub AI as detailed as possible, ideally using the core content of your requirements specification. The more context the AI has, the more precise the generated project plan with budget, timeframe, and stakeholder analysis will be.
The advantage over manual planning: The AI considers empirical data from thousands of projects and estimates efforts more realistically than a single project manager could. Of course, this does not replace human review, but it provides a solid foundation on which you can build. Learn more in our article about creating project plans.
Frequently Asked Questions
The requirements specification is created by the client and describes WHAT is desired (requirements from the customer's perspective). The functional specification is created by the contractor and describes HOW the requirements will be implemented (technical solution). The requirements specification is the basis for the functional specification. Together, both documents form the contractual basis for a project.
The scope depends on the project size. For small projects, 5-10 pages are sufficient; for medium projects, 15-30 pages; and for large projects, it can be 50 or more pages. More important than the page count is completeness and clarity: All requirements must be described clearly, measurably, and traceably. A short, precise requirements specification is better than an extensive one full of vague formulations.
The requirements specification is fundamentally created by the client, i.e., the organization or department commissioning the project. In practice, requirements engineers, business analysts, or external consultants often assist in its creation. It is important that the business side retains content responsibility and that all relevant stakeholders are involved to avoid overlooking any requirements.
DIN 69901-5 defines the requirements specification as the "totality of the client's requirements for the deliveries and services of a contractor." For automation projects, VDI/VDE 3694 provides an additional structural recommendation. In software development, the structure is often based on IEEE 830 (Software Requirements Specification). In practice, most organizations use their own template adapted to the industry.