We did not succeed in bringing all enterprise data under a single access control system. Management is forced to rely upon multiple processes to control access to data. This often results in inconsistent and incomplete control. Inconsistent control is usually inefficient. It means that management is spending too much or too little for protection.
Incomplete control is ineffective.
It means that some data are completely unprotected and unreliable. In order to provide for ease of installation and avoid deadlocks, systems are frequently shipped with security mechanisms set to the unsafe conditions by default. The designers are concerned that even before the system is completely installed, management may losecontrol. The administrator might accidentally lock himself out ofhis own system with no remedy but to start over from scratch. Therefore, the system may be shipped with controls defaulted totheir most open settings.