The AAF project is currently in maintenance mode and there are no resources for complying with these requirements.
Schedule impact
N/A
Recovery plan
There is no near-term mitigation possible. Long-term, the AAF project should be archived and the needed functionality moved to other projects, or to a new project.
Milestone schedule change
N/A
Risk
The security issues represented by these requirements will continue to be a risk.