Bring us your checklist.
Security requirements vary dramatically by operator, region, payments setup and the modules being evaluated. We would rather answer the actual checklist than publish a generic badge wall.
Authentication and user access expectations
Organization and location data separation
Data import, export and retention requirements
Payment and billing architecture relevant to your deployment
Operational logging and administrative access requirements
Any regional, contractual or regulatory requirements your organization needs to satisfy