text: However , many information security risks cannot be adequately mitigated with technical controls because they are a function of user behavior .
  
  ###
  
  Because they are a function of user behavior , many information security risks cannot be adequately mitigated with technical controls .