diff --git a/windows/security/TOC.yml b/windows/security/TOC.yml
index 818858dece..99d00bd691 100644
--- a/windows/security/TOC.yml
+++ b/windows/security/TOC.yml
@@ -1,17 +1,55 @@
 
-- name: Windows security foundation
+- name: Windows security
   href: index.yml
   expanded: true
+- name: Windows security foundations
   items: 
     - name: FIPS 140-2 Validation
       href: /windows/security/threat-protection/fips-140-validation.md
     - name: Common Criteria Certifications
       href: /windows/security/threat-protection/windows-platform-common-criteria.md
-- name: Windows hardware Security
+- name: Windows hardware security
   items: 
-    - name: Trusted Platform Module (TPM) overview
-      href: /windows/security/information-protection/tpm/trusted-platform-module-overview.md
+    - name: Trusted Platform Module
+      href: tpm/trusted-platform-module-top-node.md
+      items: 
+        - name: Trusted Platform Module Overview
+          href: tpm/trusted-platform-module-overview.md
+        - name: TPM fundamentals
+          href: tpm/tpm-fundamentals.md
+        - name: How Windows 10 uses the TPM
+          href: tpm/how-windows-uses-the-tpm.md
+        - name: TPM Group Policy settings
+          href: tpm/trusted-platform-module-services-group-policy-settings.md
+        - name: Back up the TPM recovery information to AD DS
+          href: tpm/backup-tpm-recovery-information-to-ad-ds.md
+        - name: View status, clear, or troubleshoot the TPM
+          href: tpm/initialize-and-configure-ownership-of-the-tpm.md
+        - name: Understanding PCR banks on TPM 2.0 devices
+          href: tpm/switch-pcr-banks-on-tpm-2-0-devices.md
+        - name: TPM recommendations
+          href: tpm/tpm-recommendations.md
     - name: Protect derived domain credentials with Windows Defender Credential Guard
       href: /windows/security/identity-protection/credential-guard/credential-guard.md
     - name: Kernel DMA Protection
-      href: /windows/security/information-protection/kernel-dma-protection-for-thunderbolt.md
\ No newline at end of file
+      href: /windows/security/information-protection/kernel-dma-protection-for-thunderbolt.md
+- name: Windows operating system security
+  items: 
+   - name: system security
+     items:
+     - name: Secure the Windows 10 boot process
+       href: secure-the-windows-10-boot-process.md
+   - name: Encryption and data protection
+     items:
+     - name: Bitlocker 
+       href: information-protection/bitlocker/bitlocker-overview.md
+   - name: Network security
+     items:
+     - name: VPN 
+       href: identity-protection/vpn/vpn-guide.md
+     - name: Windows Defender Firewall
+       href: threat-protection/windows-firewall/windows-firewall-with-advanced-security.md
+- name: Windows threat protection
+  items: 
+    - name: Microsoft Defender Antivirus
+      href: /microsoft-365/security/defender-endpoint/microsoft-defender-antivirus-windows.md
\ No newline at end of file
diff --git a/windows/security/index.yml b/windows/security/index.yml
index 74890e02e3..4c3fe7d66c 100644
--- a/windows/security/index.yml
+++ b/windows/security/index.yml
@@ -34,15 +34,22 @@ landingContent:
 # Cards and links should be based on top customer tasks or top subjects
 # Start card title with a verb
   # Card (optional)
-  - title: Security foundations
+  - title: Hardware security
     linkLists:
       - linkListType: overview
         links:
-          - text: Federal Information Processing Standard (FIPS) 140 Validation
-            url: /windows/security/threat-protection/fips-140-validation.md
-          - text: Common Criteria Certifications
-            url: /windows/security/threat-protection/windows-platform-common-criteria.md
-          - text: Microsoft Security Development Lifecycle (SDL)
-            url: /previous-versions/windows/desktop/cc307891(v=msdn.10)
-          - text: Microsoft bounty program
-            url: https://www.microsoft.com/msrc/bounty
\ No newline at end of file
+        - name: Trusted Platform Module
+          url: tpm/trusted-platform-module-top-node.md
+        - name: Kernel DMA Protection
+          href: information-protection/kernel-dma-protection-for-thunderbolt.md
+# Cards and links should be based on top customer tasks or top subjects
+# Start card title with a verb
+  # Card (optional)
+  - title: Operating system security
+    linkLists:
+      - linkListType: overview
+        links:
+        - name: Secure the Windows boot process
+          url: information-protection/secure-the-windows-10-boot-process.md
+        - name: Configure S/MIME for Windows 10
+          url: identity-protection/configure-s-mime.md
\ No newline at end of file