Type of security metadata about privacy and security requirements with which a security domain must comply. [ISO IEC 10181-1]