What are security practices that meet best practices?