Fundamentals of InfoSecintermediate
An organization installs security software but does not update configurations, train employees, or restrict physical access to its hardware. Explain why this approach fails according to the principle that 'security is a process, not a product'.
Answer
This approach treats security as a single, static product rather than an ongoing process. Comprehensive security requires continuous management (such as updating configurations to meet evolving threats), addressing the human element through staff training and procedures, and securing the physical environment. Relying solely on software without operational maintenance and human awareness leaves the organization vulnerable to configuration drift, social engineering, and unauthorized physical access.
Explanation
### The concept
The review says security is a process, not a product, and that protection involves technology, people, and environment. Buying software addresses only part of the problem. Without review and appropriate use, its settings may not match current needs. Staff procedures and physical access also affect whether information and systems remain protected.
### What a good answer covers
- Buying software alone does not provide ongoing security.
- Staff actions and procedures affect how controls work.
- Physical access and conditions are part of the environment.
- Controls should be reviewed as risks and circumstances change.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free