Follow-up from "Add a branch check for default security policy config"

The following discussion from !149567 (merged) should be addressed:

• @rutgerwessels started a discussion: (+1 comment)

  suggestion (non-blocking) Refactor this? The list of parameters is quite large.