Information that relates a protection requirement to a security transformation that is used to satisfy the specification.