How security responsibilities split between Guidewire and the insurer, what the platform provides, and the compliance posture regulators will ask about.