At the end of the chapter 2.1.3.8.3. of Securing Applications and Services Guide there's "==== Security Context" which should be obviously a new heading.