How would you translate non-functional requirements like scalability, security, and recovery time objectives into technical requirements?