Don't point the public directly to an internal-only URL

Use a go/ link.

Change-Id: Ide4ee4634c6e3c7b857fe7ba35c66509b39c56fb
Reviewed-on: https://chromium-review.googlesource.com/c/website/+/4068446
Reviewed-by: Adrian Taylor <adetaylor@chromium.org>
Reviewed-by: Adrian Taylor <adetaylor@google.com>
Commit-Queue: Chris Palmer <palmer@chromium.org>
diff --git a/site/Home/chromium-security/security-reviews/index.md b/site/Home/chromium-security/security-reviews/index.md
index e6ffe4c..2e035c7 100644
--- a/site/Home/chromium-security/security-reviews/index.md
+++ b/site/Home/chromium-security/security-reviews/index.md
@@ -25,8 +25,7 @@
 
 ## How does the security review process work?
 
-The full story is here: [New Chrome Security Review
-Plan](https://docs.google.com/document/d/11bnI_H0_Hg_o1mILjjH28PHB98bpSC4STh_OXLwv1gA/edit).
+The full story is here: [go/chrome-security-review-plan](go/chrome-security-review-plan) (Google-internal, sorry).
 
 TL;DR: File a launch bug, and the security team will see it on their dashboard.
 Make sure to link to a design document in the launch bug. The security