A team is testing a new mobile banking application. They need to verify: (1) users can transfer funds between accounts, (2) the app responds within 2 seconds under normal load, (3) the app works on both iOS and Android, and (4) the app properly encrypts all data in transit. How should these requirements be categorized?