A security ACL (possibly based on the WMF Phab system) needs to be created.
Description
Description
Event Timeline
Comment Actions
The project listed is the ACL. It's tagged as a policy and not a project. Also it isn't vague and making another "security" project won't make it less vague than it already isn't imo.
Comment Actions
and changed in resp. to changes description - we have a security ACL. The WMF phab system is they just put acl* at the front.