What must this system do to fulfill its purpose? - Which functions are essential (failure is catastrophic) vs. important (failure is costly) vs. nice-to-have (failure is inconvenient)?