Security doc Section 1 should include citations for external references

Section 1.2 of the document is called "Normative References" and is currently completely empty.

I don't think there are any Normative References, so I suggest we delete that section (having a section containing a sentence saying "there are none" seems excessive to me), however what the document does have is a number of Informative References.

This section should therefore be retitled "Informative References" and contain citations (in a consistent format) of all the external documents that are referenced in other sections of the document. Those references should then have pointers back to this section.