Everybody nowadays is aware of the possibility to hack IT products. Organizations that use this type of IT products in their infrastructure have two policy related questions. First questions is whether the new IT product can violate the security policy of their infrastructure, e.g. by giving non-aut...