added sec policy