This paper describes an approach to the formulation and classification of security requirements in eScience. It explains why it is untenable to suggest that 'one size fits all', and that what is an appropriate security solution in one context may not be at all appropriate in another. It proposes a framework for the description of eScience security in a number of different dimensions, in terms of measures taken and controls achieved. A distinctive feature of the framework is that these descrip...