. . "Describes required standards and capabilities that a system must implement that do not directly relate to functions e.g. legal, language and system performance requirements, operating environment and system security." . .