Watch this video on YouTube
A security policy is a rigid set of rules that must be followed explicitly in order to be effective?