Reference:Security Policy / Technical Explanation