working_paper_security_policy_8_2015.pdf