During a requirements gathering workshop, the customer's Chief Information Security Office (CISO) provides the following requirements that are pertinent to the design of a new vSphere environment:
All operating system critical patches must be installed within 24 hours of release.
All virtual machine templates must be updated every three months in line with company policy.
Which requirement classification is being gathered for the design documentation?