Failed to find ENV in /root/.profile.

What is the meaning behind the following output from security(8):

Checking root sh paths, umask values:
/etc/profile /root/.profile
Failed to find ENV in /root/.profile.

I get these daily complaints on every box where root's .profile calls out to a shell script for some housekeeping tasks on a login shell; e.g. /usr/local/bin/bash or /usr/bin/env bash. If I call out to an executable such as /bin/ls the complaint is suppressed.

Not sure why ENV would be needed because I only want these tasks to execute on a login shell. I am using ksh as the default shell. What is the security concern by not having a ENV script defined in .profile? The default .profile does not define ENV. Or have I misused/abused .profile for eternity and not known it?

Regards
Lloyd