Security consortium creates guidelines