diff --git a/doc/install/requirements.md b/doc/install/requirements.md
index 665e80e6e004e00749ef06d8a8af919a0ebf0003..bce9702b032c2b73e9474e7fef7aee728f265b8d 100644
--- a/doc/install/requirements.md
+++ b/doc/install/requirements.md
@@ -331,6 +331,10 @@ NOTE:
 We don't support running GitLab with JavaScript disabled in the browser and have no plans of supporting that
 in the future because we have features such as issue boards which require JavaScript extensively.
 
+## Security
+
+After installation, be sure to read and follow guidance on [maintaining a secure GitLab installation](../security/index.md).
+
 <!-- ## Troubleshooting
 
 Include any troubleshooting steps that you can foresee. If you know beforehand what issues
diff --git a/doc/security/index.md b/doc/security/index.md
index ab554e9135f4388d8ffcc688c6a611097bfe8255..5dc3814ea0847bbd112332ddf9828c95bb19b777 100644
--- a/doc/security/index.md
+++ b/doc/security/index.md
@@ -30,3 +30,5 @@ type: index
 ## Securing your GitLab installation
 
 Consider access control features like [Sign up restrictions](../user/admin_area/settings/sign_up_restrictions.md) and [Authentication options](../topics/authentication/) to harden your GitLab instance and minimize the risk of unwanted user account creation.
+
+Self-hosting GitLab customers and administrators are responsible for the security of their underlying hosts, and for keeping GitLab itself up to date. It is important to [regularly patch GitLab](../policy/maintenance.md), patch your operating system and its software, and harden your hosts in accordance with vendor guidance.