For an ATM system: functional requirement: the system shall dispense cash within 30 seconds of PIN validation. Non-functional: the system shall be available 99.9 percent of the time. The first describes what; the second how well. Both go in the SRS; the traceability matrix links each to design, code, and test cases.