premise: Many policies are implemented and, to some extent, enforced by technical controls, such as logical access controls that prevent individuals from reading or altering data in an unauthorized manner.
hypothesis: Technical controls are never used to implement and enforce policies.