She said that her central security group had recognized that policies, no matter how detailed, could never address every scenario that might lead to a security incident.
268990
Policies are inadequate for providing blanket coverage of all scenarios.
268991
With enough detail, policies can cover every scenario.