³ Note that security controls can engender and introduce new security risks themselves (through bugs and flaws) even as they mitigate others.