Several security managers said that short policies that emphasized the most important aspects of the organizations security concerns were more likely to be read and understood than voluminous and detailed policies.
Short policies are more likely to be read than long, detailed policies.