diff --git a/SECURITY.md b/SECURITY.md
index 58022ed3cd60a216f4d1fc10b60a48c393ebbb10..f6b559e75950c020be812c38f191281f85a8f887 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -1,5 +1,5 @@
 <!--
-SPDX-FileCopyrightText: 2023 Arm Limited and/or its affiliates <open-source-office@arm.com>
+SPDX-FileCopyrightText: 2023 - 2024 Arm Limited and/or its affiliates <open-source-office@arm.com>
 
 SPDX-License-Identifier: Apache-2.0
 -->
@@ -17,3 +17,4 @@ It is the responsibility of the users of such scripts to track such third party
 The third party sources that may be downloaded are:
 * Google Test 1.12.1.
 * Google Benchmark 1.8.3.
+* OpenCV 4.9.0 (and its dependencies)
diff --git a/conformity/opencv/CMakeLists.txt b/conformity/opencv/CMakeLists.txt
index 8f821260e9e3405bcea7d95ed4d3ac15b3d63704..c2fe46ac1c027247669dd70fedecf23e808978dc 100644
--- a/conformity/opencv/CMakeLists.txt
+++ b/conformity/opencv/CMakeLists.txt
@@ -8,6 +8,7 @@ project("OpenCV Conformity" CXX)
 
 set(CMAKE_CXX_STANDARD 17)
 
+# Please update SECURITY.md if adding, removing or changing the version of third party content.
 set(OPENCV_VERSION "4.9.0" CACHE STRING "Version of OpenCV")
 set(OPENCV_URL "https://github.com/opencv/opencv/archive/refs/tags/${OPENCV_VERSION}.tar.gz" CACHE STRING "URL of OpenCV")