Insights from security policy