security plan for pspf reporting obligations