cio-requirement