A security policy is a comparison of the security controls you have in place and the controls you need in order to address all identified threats.
A. True
B. False