During a requirements gathering workshop, the customer's Chief Information Security Office (CISO) provides the following requirements that are pertinent to the design of a new vSphere environment:
- All operating system critical patches must be installed within 24 hours of release.
- All virtual machine templates must be updated every three months in line with company policy.
Which requirement classification is being gathered for the design documentation?