Although powerful technical controls, such as those involving encryption, are becoming increasingly available to facilitate information security, effective implementation requires that these techniques be thoughtfully selected and that their use be monitored and managed on an ongoing basis.