Regulation on institutional security policies and anti-terrorist protection of critical infrastructure