Cyber policy technical requirements