Requirements for Security Performance Management