‘Security agencies must make decisions on professional knowledge’