Supplementing Data Security Requirements