500 words 2 references

A tenet of telecommunications says the more people who acess a network, the more valuable the network becomes.  This is called Metcalfe's Law.  Chapter nine examines different types of users on networks as it reviews an individuals need for access & how those needs can lead to risks.

1. How can the use of security policies reduce risk?

2.  How can a SAP reduce risk?  

3. Why are end-users considered the "weakest" link in regards to implementing security policies and controls?