cis: security files added