A VMware Cloud Foundation (VCF) platform has been commissioned, and lines of business are requesting approved virtual machine applications via the platform's integrated automation portal. The platform was built following all provided company security guidelines and has been assessed against Sarbanes-Oxley
Act of 2002 (SOX) regulations. The platform has the following characteristics:
One Management Domain with a single cluster, supporting all management services with all network traffic handled by a single Distributed Virtual Switch (DVS).
A dedicated VI Workload Domain with a single cluster for all line of business applications. A dedicated VI
Workload Domain with a single cluster for Virtual Desktop Infrastructure (VDI).
Aria Operations is being used to monitor all clusters.
VI Workload Domains are using a shared NSX instance.
An application owner has asked for approval to install a new service that must be protected as per the Payment Card Industry (PCI) Data Security Standard, which is going to be verified by a third-party organization.
To support the new service, which additional non-functional requirement should be added to the design?