anchor: She said that her central security group had recognized that policies, no matter how detailed, could never address every scenario that might lead to a security incident.
positive: Policies are inadequate for providing blanket coverage of all scenarios.
negative: With enough detail, policies can cover every scenario.