diff --git a/windows/security/TOC.yml b/windows/security/TOC.yml
index be0bcbec13..dd76035b25 100644
--- a/windows/security/TOC.yml
+++ b/windows/security/TOC.yml
@@ -2,16 +2,6 @@
 - name: Windows security
   href: index.yml
   expanded: true
-- name: Security foundations
-  items: 
-    - name: FIPS 140-2 Validation
-      href: threat-protection/fips-140-validation.md
-    - name: Common Criteria Certifications
-      href: threat-protection/windows-platform-common-criteria.md
-    - name: Microsoft Security Development Lifecycle
-      href: threat-protection/msft-security-dev-lifecycle.md
-    - name: Microsoft Bug Bounty Program
-      href: threat-protection/microsoft-bug-bounty-program.md
 - name: Hardware security
   items: 
     - name: Trusted Platform Module
@@ -313,6 +303,16 @@
                   href: identity-protection/virtual-smart-cards/virtual-smart-card-evaluate-security.md
             - name: Tpmvscmgr
               href: identity-protection/virtual-smart-cards/virtual-smart-card-tpmvscmgr.md
+- name: Security foundations
+  items: 
+    - name: FIPS 140-2 Validation
+      href: threat-protection/fips-140-validation.md
+    - name: Common Criteria Certifications
+      href: threat-protection/windows-platform-common-criteria.md
+    - name: Microsoft Security Development Lifecycle
+      href: threat-protection/msft-security-dev-lifecycle.md
+    - name: Microsoft Bug Bounty Program
+      href: threat-protection/microsoft-bug-bounty-program.md
 - name: Privacy controls
   items:
   - name: Windows Privacy controls
diff --git a/windows/security/index.yml b/windows/security/index.yml
index 1dcca94f77..e59fa8c210 100644
--- a/windows/security/index.yml
+++ b/windows/security/index.yml
@@ -18,21 +18,6 @@ metadata:
 
 landingContent:
 # Cards and links should be based on top customer tasks or top subjects
-# Start card title with a verb
-  # Card (optional)
-  - title: Security foundations
-    linkLists:
-      - linkListType: concept
-        links:
-          - text: Federal Information Processing Standard (FIPS) 140 Validation
-            url: /windows/security/threat-protection/fips-140-validation.md
-          - text: Common Criteria Certifications
-            url: /windows/security/threat-protection/windows-platform-common-criteria.md
-          - text: Microsoft Security Development Lifecycle
-            url: /windows/security/threat-protection/msft-security-dev-lifecycle.md
-          - text: Microsoft Bug Bounty
-            url: /windows/security/threat-protection/microsoft-bug-bounty-program.md
-# Cards and links should be based on top customer tasks or top subjects
 # Start card title with a verb
   # Card (optional)
   - title: Hardware security
@@ -90,6 +75,21 @@ landingContent:
         - text: article (change link later)
           url: /windows/security/threat-protection/windows-security-baselines.md
 # Cards and links should be based on top customer tasks or top subjects
+# Start card title with a verb
+  # Card (optional)
+  - title: Security foundations
+    linkLists:
+      - linkListType: concept
+        links:
+          - text: Federal Information Processing Standard (FIPS) 140 Validation
+            url: /windows/security/threat-protection/fips-140-validation.md
+          - text: Common Criteria Certifications
+            url: /windows/security/threat-protection/windows-platform-common-criteria.md
+          - text: Microsoft Security Development Lifecycle
+            url: /windows/security/threat-protection/msft-security-dev-lifecycle.md
+          - text: Microsoft Bug Bounty
+            url: /windows/security/threat-protection/microsoft-bug-bounty-program.md
+# Cards and links should be based on top customer tasks or top subjects
 # Start card title with a verb
   # Card (optional)
   - title: Privacy controls