BCC security requirements