Companies included must derive at least half of their revenues from cybersecurity, have revenue growth of at least 7% over the trailing three years for new additions to the index, or 5% for current index constitutions,