regulatory security