Functionality may be based on a set of (assurance functionality requirements).
A (security-limited functionality environment) can be a subset of some environment.
A higher level can be constituted-of-or-filled-with (security functionality).
Some (functionality requirements) may be based on (security practices).