However, they noted that more detailed guidelines often provided answers to employees' questions and served as a tool for educating subordinate security managers and others who wanted a more thorough understanding of good security practices.
According to them, detailed guidelines are utterly useless in educating security managers.