System security requirement