service security and good governance policy