The University of SydneyPage 23Security Controls–Security policy: actions the entities of the system are allowed to takeand which ones are prohibited–Security mechanisms: to ensure the secure policy:–Physical and hardware controls–Locks and doors, guards at entry, general physical site planning–Security devices such as firewalls, IDS/IPS, etc.–Authentication hardware–Smart card applications and circuit boards controlling access to disk drives