Security Advisory – from strategy to implementation