diff --git a/README.md b/README.md
index 5325aeb..f9b5eee 100644
--- a/README.md
+++ b/README.md
@@ -95,7 +95,7 @@ Description: Specify a security policy to apply to the listener. This option is
 
 Type: `string`
 
-Default: `""`
+Default: `"ELBSecurityPolicy-TLS13-1-2-2021-06"`
 
 ### <a name="input_instance_type"></a> [instance\_type](#input\_instance\_type)
 
diff --git a/main.tf b/main.tf
index 908950e..d5b80b2 100644
--- a/main.tf
+++ b/main.tf
@@ -71,7 +71,7 @@ module "environment" {
   loadbalancer_subnets         = var.public_subnet_ids
   loadbalancer_type            = var.loadbalancer_type
   loadbalancer_certificate_arn = module.acm.acm_certificate_arn
-  loadbalancer_ssl_policy      = var.loadbalancer_ssl_policy == "" ? "ELBSecurityPolicy-2016-08" : var.loadbalancer_ssl_policy
+  loadbalancer_ssl_policy      = var.loadbalancer_ssl_policy
 
   instance_type = var.instance_type
 
diff --git a/variables.tf b/variables.tf
index b8b4aa0..cc5082d 100644
--- a/variables.tf
+++ b/variables.tf
@@ -21,7 +21,7 @@ variable "loadbalancer_type" {
 
 variable "loadbalancer_ssl_policy" {
   type        = string
-  default     = ""
+  default     = "ELBSecurityPolicy-TLS13-1-2-2021-06"
   description = "Specify a security policy to apply to the listener. This option is only applicable to environments with an application load balancer"
 }