working_paper_security_policy_7_2015.pdf