diff --git a/windows/security/TOC.yml b/windows/security/TOC.yml
index 9165264ba7..bb79e0aa9b 100644
--- a/windows/security/TOC.yml
+++ b/windows/security/TOC.yml
@@ -210,7 +210,11 @@
      - name: Controlled folder access
      - name: Exploit protection
      - name: Microsoft Defender for Endpoint
-- name: Application protection
+- name: Application security
+  items:
+- name: Secured identity
+  items:
+- name: Cloud services
   items:
 - name: User protection
   items: