fixed security risk