diff --git a/www/big-picture/roadmap.spt b/www/big-picture/roadmap.spt
index 3211d7b..9af1071 100644
--- a/www/big-picture/roadmap.spt
+++ b/www/big-picture/roadmap.spt
@@ -33,11 +33,18 @@ packages, not just a few.
 
 - [stop using immutable ids as primary key](https://github.com/gratipay/gratipay.com/issues/835)
 - other [embarrassments](https://github.com/gratipay/gratipay.com/labels/Pretty%20Embarrassing)
+- [see also](https://github.com/orgs/gratipay/projects/7?fullscreen=true)
 
 
 ## Accounting
 
-- [collect historical statement data](https://github.com/gratipay/finances/issues/26)
-- [settle on tooling](https://github.com/gratipay/finances/issues/22)
+- [Port to Beancount](https://github.com/gratipay/finances/issues/22)
+- [account for one month once ever](https://github.com/gratipay/finances/pulls)
 - [catch up on books](https://github.com/gratipay/finances/issues/3)
 - [resolve escrow imprecision](https://github.com/gratipay/inside.gratipay.com/issues/389#issuecomment-153929881)
+
+
+## Security
+
+- [Full security report](https://github.com/orgs/gratipay/projects/10?fullscreen=true)
+- [revise security program for higher signal](https://github.com/gratipay/inside.gratipay.com/issues/789)