Briefly yet thoroughly answers the following two questions.

1) How will you implement and enforce an Enterprise Security Policy. Describe at least 4 steps you will use.

2) Give an example of security through obscurity in a computer situation. Give an example of security through obscurity in a situation not involving computers. Is security through obscurity an effective countermeasure in either example? Why or why not? How would the physical security aspect of protecting computer assets relate in this case? Make sure to give some examples.