GAO/AIMD00295, September 6, 2000) showed that in 24 agencies, physical and logical access controls were not effective in preventing or detecting system intrusions or misuse.
Both types of access controls were effective in preventing unauthorized access to the system.