Security events are NOT a part of regular backup. The restore procedure will not modify their content in any way. In principle the security event data should be immutable. In practice it can be modified manually by a very determined person (by default the NEM scurity administrator), but there is no official workflow to do that. Security event database will only be wiped upon full FOXMAN-UN uninstallation.