Page 58

The University of Sydney Page 1310. Security breaches can only be attributed to the failure of technical controls. (True / False)False–Security controls at formal, informal and technical levels are required to operate in a coordinated manner to ensure effective information security.–Failures in security controls at any of these three levels will result in a security breach.–For example, Security controls for access to information could be implemented by:–Requirement of a username and password to gain access (technical control), and–Operational rule that passwords must not be shared between users (formal control)–A failure in any one of these controls can result in the failure of the controls for access to the information.