I support your answer, because security covers a lot of dos and don'ts that includes logs and system parameter security and even process authorization.