Some say Security is a process not a product. AND some say it is a mistake to focus too heavily on security technology compared to security management.

a. We must have security technology, what is meant by being focused too heavily on security technology?

b. Give examples or evidence of focus on security management.