'stepping back to' has no place in academic prose, nor do Norman's personal pronouns. What isn't clear from the question is why do you need to refer back to point 1? The reason will determine how you refer to it. I would refer to point 1 as paragraph 1 or section 1 (depending on how big it is). As described in paragraph 1, above As might be expected given paragraph 1, above Following on from paragraph 1, above There are plenty more to suit different purposes. FWIW 'the security aspect' reads like Asian English, correct but regional, 'security' by itself should do. From an information security perspective, I would not expect to see the password itself credited with improving security - either it is something the password is part of (e.g. 'password protection') or something specific about the password ('mandatory password', 'minimum password length') I would expect to.see referred to here.

"Stepping back to...", "Referring back to...", "As I have already mentioned in....", "As you will recall from...." Are all acceptable alternatives.