At any level, they can be considered any security necessities, derived and summarizing various sources such as legislation, best practices, standards, regulations, procedures, directives, policies, or other business necessities. They need to be respected in order to ensure confidentiality, integrity, and availability of the information that’s managed, transmitted, or stored in the system.