SecurtyAssist uses PHP code to prevent access to web pages in your site, because of this, it can only protect PHP pages. SecurityAssist cannot be applied to a directory or a csv file.
You mention that the csv file is stored bellow the webroot. Files stored on your server below the web root are not accessible through the browser using a URL. Files stored below the webroot can only be accessed through server side code, or through FTP access.