Without adequate awareness about the risks involved in disclosing sensitive information , users may volunteer information which can allow an intruder to circumvent otherwise well-designed access controls .
Access controls are well designed but can be circumvented by irresponsible volunteers .