Update notes for submitted changes

* Corrected 'were' to 'are' in description of OSSN, Security Guide: Chapter 09