anchor: GAO/AIMD00295, September 6, 2000) showed that in 24 agencies, physical and logical access controls were not effective in preventing or detecting system intrusions or misuse.
positive: Logical access controls didn't do enough to stop people from abusing the system in at least 2 dozen agencies.
negative: Both types of access controls were effective in preventing unauthorized access to the system.