A security product can replace the continuing work of managing people, technology, and the operating environment.

### Why this is right The statement is false because the review describes computer security as a process, not a product. A security product can support that process, but it cannot replace ongoing attention to people, technology, and environment. ### The concept Security controls need to be selected, configured, used, and reviewed. Human actions and environmental conditions can weaken even well-designed technical safeguards. ### Watch out The phrase “security product” can make protection sound complete once something is purchased. The review rejects that one-time view. ### Terms - **Control**: A safeguard or procedure intended to reduce a security risk. ### Remember A product can be part of security, but security itself requires continuing work.