Which of the following is NOT true about cyber-security?
1. Data must be encrypted in a manner that it cannot be decrypted until after the information is of no value
2. Security means confidentiality
3. IT security is part of physical security
4. Security should be risk based- cost effective
