Security policy correct