Effectiveness of Controls

• Merely having controls is useless if they are ineffective.

  • Awareness of problem: If people are not aware of the need for a particular security measure they will most likely ignore it or refuse to abide by it
  • Likelihood of use: If it is so complicated or difficult to use that nobody will accept to do then it is ineffective and useless.
  • Overlapping controls: Multiple controls that overlap in areas of effective use contribute to the overall effectiveness of the system.