IN PREVIOUS CHAPTERS, WE DEALT WITH ACCESS CONTROLS primarily from a technological and a policy standpoint. In this chapter, we will delve into the human side of access controls. Human beings are often the weakest link in any access control system. This chapter will examine human behavior, and how adverse behavior can be mitigated through training, organizational culture, and employee support. We also cover employment best practices and ethics programs, which help combat problem behaviors in the workplace.