responsible security practices