If security safeguards are implemented without considering certain practical aspects, they might prove ineffective. For example, it does not make sense to block an entrance area using turnstiles if employees can easily access the building using an open side entrance.

Individual safeguards may also be implemented that do not make sense from an economic point of view. Hence, a properly implemented rights and role concept is a more reasonable and economical way to protect information with normal levels of confidentiality than complex, certificate-based encryption of a file server.