diff --git a/README.md b/README.md
index a806f272..21628d95 100644
--- a/README.md
+++ b/README.md
@@ -22,7 +22,7 @@ Currently, the following features are not considered to be production-ready:
 
 ## Security
 
-The reporting process and disclosure communications are outlined in [/org/security](https://github.com/opencontainers/org/blob/master/security/).
+The reporting process and disclosure communications are outlined [here](https://github.com/opencontainers/org/blob/master/SECURITY.md).
 
 ## Building
 
diff --git a/SECURITY.md b/SECURITY.md
index 63a74388..61e37bc5 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -1,3 +1,3 @@
 # Security
 
-The reporting process and disclosure communications are outlined in [/org/security](https://github.com/opencontainers/org/blob/master/security/).
+The reporting process and disclosure communications are outlined [here](https://github.com/opencontainers/org/blob/master/SECURITY.md).