https://ones.com/ja/blog/knowledge/security-policy-pitfalls-and-solutions/