Security product requirements