How do I perform a security update
Depends on your CMS - Here is the link https://wiki.civicrm.org/confluence/display/CRMDOC/Installation+and+Upgrades
Always backup first - 
It is kind of like doing an instal except you do not need to do the configuration after :-)