CONTENT ASSET: security-policy