GAO / AIMD00295 , September 6 , 2000 ) showed that in 24 agencies , physical and logical access controls were not effective in preventing or detecting system intrusions or misuse .
Both types of access controls were effective in preventing unauthorized access to the system .