Currently, the email as sent out to all users part of the security admin group and they are added to the Bcc header.

It would be better to include the users in the To header and send the email indivdually to each user in the security admin group.