BO65 security architecture policy requirements definition