Question

It is generally recommended that security policies should focus on specific products rather than product capabilities because it is important that there is a uniformity of devices across an organization. This consistency makes security policies easier to enforce.a. True.b. False.

Answer 1

Answer: False

Explanation: A security policy identifies all of a company's assets (critical databases, product capabilities, employee records, customer base etc) including potential threats to those assets. Security policy is a set of objectives for the company, rules of behavior for users and administrators, and requirements for system and management that as a whole ensures the security of network and computer systems in an organization. While it is useful to have uniformity of devices in and across an organisation, its consistency doesn't make security policies easier to enforce as these policies as a living document is never finished and is continuously updated as technology and employee needs or requirements change.