Which security policy should the customer modify to obtain more information?