new requirements in cyber security