Our RHDM doc mentions

https://access.redhat.com/documentation/en-us/red_hat_decision_manager/7.3/html/installing_and_configuring_red_hat_decision_manager_on_red_hat_jboss_eap_7.2/assembly_installing-on-eap-deployable#eap_execution_server_download_install_proc

https://access.redhat.com/documentation/en-us/red_hat_decision_manager/7.3/html/installing_and_configuring_red_hat_decision_manager_in_a_red_hat_jboss_eap_clustered_environment/clustering-ps-con#clustering-download-eap-ps-proc

Copy the contents of the TEMP_DIR/rhdm-7.3.0-kie-server-ee8/rhdm-7.3.0-kie-server-ee8/SecurityPolicy/ to EAP_HOME/bin. When asked to overwrite files, click Replace.

In rhdm-7.3.0-kie-server-ee8.zip, "SecurityPolicy" directory contains only "security.policy" and "kie.policy". But it's not enough. In order to use "security.policy" and "kie.policy", "SecurityPolicy" directory also should have standalone-secure.sh/standalone-secure.conf (and ".bat" for Windows) just like RHDM-641 (which I filed for installer).