Need a clarification on applying security patch recommendation

 Hi,

    By using Oracle maintenance wizard, In the Post-Update Tasks Category --> While execute 1-Review Security Practices (Required) patch step, had some security recommendation to follow.

     Navigation path:  Category: Post-Update Tasks > Product Family: Post-Update Tasks > Task: 2 - Review Security Practices

• Review the recommended security processes documented in Best Practices for Securing Oracle E-Business Suite Release 11i. In particular, you must explicitly grant access to any machine that requires direct access to the RDBMS, and is not a registered node in AutoConfig. (For example, OAM clients).
• Attention : If you set the profile option SIGNON_PASSWORD_HARD_TO_GUESS to N in Category: Pre-Update Task, TASK: 22 - Change password policy control, restore this value to Y now. For more information about password policy control, see